260913-zh9sjsv1ds_pw_infected[.]zip

General

Target
260913-zh9sjsv1ds_pw_infected.zip
Size 20.6MB
Sample260916-tsfdsssgrf
SHA256 5ac652394bf4bfa2dcd1c1d37a438c1aadf27ef18aa69b89dcee19d59b009c86
MD5 c43e7a37f16106f24f23f40b8b482d9d
SHA1 89e5e8a948680892b5ed175841dccdac4e390c37
SHA512 c3949878aec43ef076cf61258c5248dc3a1fdebb3c18960af1a0e81c7a78465e4b383d241f5d66cedbafc45caae9fa382250409527a9bbaee7e2b1a29700bada
SSDEEP 393216:cpduFEpoZbs/64gmAG5hmCd2uIzkUOMOySVFNA5qvj:cpduFYmbfmkjxO9NAMj
TLSH
T1F527332D5226C59871F469793E3B0708C5DAEBA750D4C09DAC239E67FE828C56E332C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ErmWhatsWrongWithMyPC.exe

File Explorer

260913-zh9sjsv1ds_pw_infected.zip

.zip 20.6MB
ErmWhatsWrongWithMyPC.exe

.exe 25.2MB

260913-zh9sjsv1ds_pw_infected.zip

SHA256 5ac652394bf4bfa2dcd1c1d37a438c1aadf27ef18aa69b89dcee19d59b009c86
MD5 c43e7a37f16106f24f23f40b8b482d9d
SHA1 89e5e8a948680892b5ed175841dccdac4e390c37
SHA512 c3949878aec43ef076cf61258c5248dc3a1fdebb3c18960af1a0e81c7a78465e4b383d241f5d66cedbafc45caae9fa382250409527a9bbaee7e2b1a29700bada
SSDEEP 393216:cpduFEpoZbs/64gmAG5hmCd2uIzkUOMOySVFNA5qvj:cpduFYmbfmkjxO9NAMj
TLSH
T1F527332D5226C59871F469793E3B0708C5DAEBA750D4C09DAC239E67FE828C56E332C7
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

ErmWhatsWrongWithMyPC.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 c2e9fbca414575d5c080d97f378024a4d131d6e1262112aebaa96eafa3592381
MD5 cc1de237b93bcbae465f9d3bf4df075a
SHA1 72967f94fed66473027c9b36a17bb61cf8e22540
SHA512 adc805afbbda05794159d8c03ede6aa011f1301ffdecabd5bd36eed637b53f5799f3479fd9c35a253548b6119a90cf00d8b3dcd745d2b9ea4b0675b152123925
SSDEEP 393216:NVn+SLSF5pdHn2AXUCITkkkkkrkkkkkkkkkkkk6lX0wfGtbYTZb08MQUCITkkkks:PduvnNG0shAQ31qnMb5OM9Tth
TLSH
T1B047C0863B60C192CDF278719473DAC016387E6DCF3255A6DBCB4A0ABC518B7051BE7A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8993

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

260913-zh9sjsv1ds_pw_infected.zip

ErmWhatsWrongWithMyPC.exe

msvcrt

shell32

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

260913-zh9sjsv1ds_pw_infected.zip

ErmWhatsWrongWithMyPC.exe

msvcrt

shell32

kernel32

generic