09092026_0432_08092026_ទម្រង់លិខិតអនុញ្ញាតច្បាប់-[.]bat[.]rar

General

Target
09092026_0432_08092026_ទម្រង់លិខិតអនុញ្ញាតច្បាប់-.bat.rar
Size 3.3MB
Sample260909-e6g28a1yew
SHA256 39f0ad599b3b545e7b921250b1f95c03672b93f61e979f6d0fd081ba07f6bb63
MD5 0efa1a64ccee23721ebb91ffb097a70a
SHA1 c52377ff817c952f2d50fc124cde94aa311e76cf
SHA512 18ed11778c5122f1ca5fc93af33bff21058ae1fc67f8776cfff606fd14b673bad414bfe2f6855f79f52c1c18cc3f513abbc8fed6b05f21f6b021785eff7dd97d
SSDEEP 49152:NwraySmjkN0bb4ZKw56v5BUv9Rz1H0Sqk59knIcV7bvbo+xKvDQ8oYyGjIzdyigO:aeWaekZQvHqAzDblIQXGjZXi0W
TLSH
T136F533C8F855272F8479E356E9C987E7B90524BA09F846F81C9B1DAC27F7CF4062407A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ទម្រង់លិខិតអនុញ្ញាតច្បាប់^.bat

File Explorer

09092026_0432_08092026_ទម្រង់លិខិតអនុញ្ញាតច្បាប់-.bat.rar

.rar 3.3MB
ទម្រង់លិខិតអនុញ្ញាតច្បាប់^.bat

.exe 3.4MB

09092026_0432_08092026_ទម្រង់លិខិតអនុញ្ញាតច្បាប់-.bat.rar

SHA256 39f0ad599b3b545e7b921250b1f95c03672b93f61e979f6d0fd081ba07f6bb63
MD5 0efa1a64ccee23721ebb91ffb097a70a
SHA1 c52377ff817c952f2d50fc124cde94aa311e76cf
SHA512 18ed11778c5122f1ca5fc93af33bff21058ae1fc67f8776cfff606fd14b673bad414bfe2f6855f79f52c1c18cc3f513abbc8fed6b05f21f6b021785eff7dd97d
SSDEEP 49152:NwraySmjkN0bb4ZKw56v5BUv9Rz1H0Sqk59knIcV7bvbo+xKvDQ8oYyGjIzdyigO:aeWaekZQvHqAzDblIQXGjZXi0W
TLSH
T136F533C8F855272F8479E356E9C987E7B90524BA09F846F81C9B1DAC27F7CF4062407A
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

ទម្រង់លិខិតអនុញ្ញាតច្បាប់^.bat

IMPHASH 027ea80e8125c6dda271246922d4c3b0
SHA256 86fa63b4ab0f4c6684e045e9df793867c5e02e2e28ec066099af2139d92d4e60
MD5 5c1db016aeeb2854bc253a9f3a594d90
SHA1 57df1d65796818295bbd1628c803dbb61ec9ac21
SHA512 cdda83ef00f82c78f11a96dfdbb21ceca70c559b3559a74e7588a44ddf3b62680dd6899ef21098144f0138423996f33a9c2d74908fe5663abab4d097b8c3936d
SSDEEP 98304:K49DRkhJZf9k3nZRLNu6goAE8XNXJFWNZhpcq9F+o4B8FEQ:K49RkHZi3nZRL/g2qXJF83pF9r4eFT
TLSH
T18AF53382FEC04072D5B45D36057DAB19E96CB4616D40CE9FA3E80EAFDEB90D19A38D43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

118473

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc GetTickCount SetCurrentDirectoryW GetExitCodeProcess GetLocalTime MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle HeapSize GetConsoleCP GetConsoleMode SetFilePointerEx DecodePointer

Sharing