9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc

Sharing

Copy URL Twitter E-mail

General

Target
9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc
Size 195KB
Sample261027-nktcsstvb1
SHA256 9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc
MD5 6ca40ad2453db0b93ed937af9f63e830
SHA1 22b84c49d2515bb17d3ff43616709d3d519ff019
SHA512 8187581673f41bb0095b1c7a8e904a3ae5d74beb2c812e200e90152f376616a3c4c93fc379a00944cd59d8616e6ee129bcfc8369a838f815b574a9c8b17791ce
SSDEEP 3072:5C9X4A0WhZs9EVgvCKhPkUPIBECpYDMzIucemeAcULT:5CdrsOVgFWUPVD1uc1eAcULT
TLSH
T10614752153DB02BDE37361B7AFF0E69A7436F4B096A1A50923600F793E32DB0962175D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc

File Explorer

9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc

.exe 195KB

9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc

IMPHASH 1220bc3f41c0ba2099fb69ad4bf14cb9
SHA256 9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc
MD5 6ca40ad2453db0b93ed937af9f63e830
SHA1 22b84c49d2515bb17d3ff43616709d3d519ff019
SHA512 8187581673f41bb0095b1c7a8e904a3ae5d74beb2c812e200e90152f376616a3c4c93fc379a00944cd59d8616e6ee129bcfc8369a838f815b574a9c8b17791ce
SSDEEP 3072:5C9X4A0WhZs9EVgvCKhPkUPIBECpYDMzIucemeAcULT:5CdrsOVgFWUPVD1uc1eAcULT
TLSH
T10614752153DB02BDE37361B7AFF0E69A7436F4B096A1A50923600F793E32DB0962175D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

118800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetModuleHandleA GetProcAddress EnterCriticalSection LeaveCriticalSection GetEnvironmentVariableW CreateDirectoryW GetModuleFileNameW ExitProcess GetCurrentProcess CloseHandle GetSystemInfo CreateToolhelp32Snapshot OpenProcess SetProcessAffinityMask GetLastError GetProcessAffinityMask CreateProcessW WaitForSingleObject GetExitCodeProcess TerminateProcess Sleep GetFileAttributesW CreateThread CreateFileW WriteFile GetFileSize ReadFile DeleteFileW GetProcessHeap HeapAlloc HeapFree SetFilePointer FindFirstFileW SetFileAttributesW FindNextFileW FindClose GetDiskFreeSpaceExW RemoveDirectoryW GetTempPathW GetSystemDirectoryW SetPriorityClass MultiByteToWideChar InitializeCriticalSection DeleteCriticalSection GetStartupInfoW GetCommandLineW GetModuleHandleW

msvcrt

_vsnwprintf _snwprintf wcscpy wcsrchr _wfopen_s fwprintf fclose memset fgetws wcsstr memmove wcslen free malloc strstr wcscmp wcsncpy towupper wcscat strlen memcmp _wcsicmp strchr memcpy strcpy strcat _beginthreadex _wcsdup _controlfp __set_app_type __argc __wargv _wenviron __wgetmainargs exit

user32

GetWindowTextLengthW SendMessageW GetWindowTextW EnumDisplaySettingsW ChangeDisplaySettingsW IsWindowVisible GetWindowThreadProcessId GetWindowRect EnumWindows GetWindowLongPtrW SetWindowLongPtrW SetWindowPos PostMessageW EnumDisplayDevicesW MessageBoxW DrawTextW CreateWindowExW LoadIconW ShowWindow SetWindowTextW GetClientRect FillRect EnableWindow CreatePopupMenu AppendMenuW GetCursorPos SetForegroundWindow TrackPopupMenu DestroyMenu UpdateWindow DestroyWindow PostQuitMessage DefWindowProcW LoadCursorW RegisterClassExW GetMessageW TranslateMessage DispatchMessageW

advapi32

AllocateAndInitializeSid CheckTokenMembership FreeSid OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegQueryValueExW RegCloseKey RegSetValueExW RegDeleteValueW RegCreateKeyExW RegEnumKeyExW RegDeleteTreeW

shell32

ShellExecuteW SHGetFolderPathW Shell_NotifyIconW

winhttp

WinHttpOpen WinHttpConnect WinHttpOpenRequest WinHttpSetTimeouts WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpReadData WinHttpCloseHandle

gdi32

CreatePen CreateSolidBrush SelectObject RoundRect DeleteObject MoveToEx LineTo GetStockObject SetBkMode SetTextColor CreateFontW SetBkColor Polygon

Sharing

General

Malware Config

Signatures

File Explorer

9cc2eb262ce9718d9c8ddbe73ede1aa4e8d8729adc2444e84324013eff6511fc

kernel32

msvcrt

user32

advapi32

shell32

winhttp

gdi32

generic