9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b

General

Target
9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b
Size 412KB
Sample261022-v5f2jad14t
SHA256 9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b
MD5 866d86e28c4495fbfdbc514e55f7fcf0
SHA1 42fc5e1e327b995441ef99809e112ef7ee586410
SHA512 97b6c7eff0994055a75eb869e1517eb787e65fe5c4c335d78daa62a1f0230792dd4de9f688d9e5767019d0670f05ae51c23b3df06680a7d6d1cc1d3fee2a9340
SSDEEP 3072:tGt3UOvX/bAd9HJ9W55TbUpn61J3yigYs1P1PTlfv1:wtPYZYov1
TLSH
T1F9948C5123EA5205F6F37F795DBA44588F27BCA2AE36C28F119C412E4FB36809974732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b

File Explorer

9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b

.exe 412KB

9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b

IMPHASH b7fe7eeac6188c466d47bf94821f4464
SHA256 9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b
MD5 866d86e28c4495fbfdbc514e55f7fcf0
SHA1 42fc5e1e327b995441ef99809e112ef7ee586410
SHA512 97b6c7eff0994055a75eb869e1517eb787e65fe5c4c335d78daa62a1f0230792dd4de9f688d9e5767019d0670f05ae51c23b3df06680a7d6d1cc1d3fee2a9340
SSDEEP 3072:tGt3UOvX/bAd9HJ9W55TbUpn61J3yigYs1P1PTlfv1:wtPYZYov1
TLSH
T1F9948C5123EA5205F6F37F795DBA44588F27BCA2AE36C28F119C412E4FB36809974732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

25264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteTreeW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf __stdio_common_vswprintf _configure_wide_argv _crt_atexit _errno _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wcsdup _wcsicmp _wcsnicmp _wcstoui64 _wcsupr _wfopen exit fclose fread free fwrite getenv iswspace iswxdigit malloc memmove realloc strchr strcmp strcpy strcspn strlen strpbrk towlower towupper wcschr wcslen wcsncmp wcspbrk wcsrchr wcstoul

kernel32

CloseHandle CreateFileW DelayLoadFailureHook FormatMessageW GetModuleHandleW GetOEMCP GetProcAddress GetStdHandle GetTickCount HeapAlloc HeapReAlloc IsBadStringPtrW LocalFree MultiByteToWideChar ReadConsoleW ResolveDelayLoadedAPI WideCharToMultiByte WriteConsoleW WriteFile lstrcmpW lstrcmpiW

ntdll

_vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

9ffba8d6b20fb5dbd63f2598101f65bb9af52aacb63c2241310599af240c923b

advapi32

ucrtbase

kernel32

ntdll

generic