9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a

Sharing

Copy URL Twitter E-mail

General

Target
9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a
Size 6.0MB
Sample261110-wn2gkshf25
SHA256 9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a
MD5 d1fa8e9ddec5f141c137b33e008d708a
SHA1 9d8fc638a943ff2db109ce44ed2093cdb3d89ae0
SHA512 0bc757f1119a47218d75e74234bb3b6de8969f28b5483f93c5ad06dda4f0c0ec4e344194a2af7b91f5e746d6f77d1cd31f583b17666deb34c3f930725f8f7f17
SSDEEP 49152:knjCB2KkDm1pJJ4nb5uU8s8xBNuDafVnmQZMdf:kjAkDmxJsoU8Lk2xmQC
TLSH
T13A56AAC058B5FBA9CF10F8B2BE94E005E13175C992A98ED3136AAA4E1D2F44EDC7754C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a

File Explorer

9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a

.dll 6.0MB

9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a

IMPHASH f482c9a94a61ed7fbf24e121c2306b2f
SHA256 9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a
MD5 d1fa8e9ddec5f141c137b33e008d708a
SHA1 9d8fc638a943ff2db109ce44ed2093cdb3d89ae0
SHA512 0bc757f1119a47218d75e74234bb3b6de8969f28b5483f93c5ad06dda4f0c0ec4e344194a2af7b91f5e746d6f77d1cd31f583b17666deb34c3f930725f8f7f17
SSDEEP 49152:knjCB2KkDm1pJJ4nb5uU8s8xBNuDafVnmQZMdf:kjAkDmxJsoU8Lk2xmQC
TLSH
T13A56AAC058B5FBA9CF10F8B2BE94E005E13175C992A98ED3136AAA4E1D2F44EDC7754C
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5913204

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetSystemDirectoryW SetFileAttributesW CreateToolhelp32Snapshot Sleep EnumUILanguagesA GetTickCount64 GetLastError Process32NextW lstrcatW LockResource QueryPerformanceFrequency Process32FirstW CloseHandle FreeConsole CreateThread LoadResource FindResourceW GetCurrentDirectoryW GetFileSize GlobalMemoryStatusEx CopyFileW GetConsoleWindow lstrcpyW QueryPerformanceCounter WriteConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetStdHandle GetStringTypeW SetFilePointerEx GetFileAttributesW LCMapStringW FlsFree CreateFileW CreateMutexW GetModuleFileNameW VirtualAlloc DeviceIoControl ExpandEnvironmentStringsW WriteFile lstrlenW GetCurrentProcess VirtualFree VirtualProtect SizeofResource GetModuleFileNameA ReadFile CreateDirectoryW GetProcessHeap GetProcAddress HeapAlloc GetModuleHandleA FlsSetValue FlsGetValue FlsAlloc FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType GetStdHandle GetModuleHandleExW ExitProcess LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW LocalFree RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError EncodePointer

user32

ShowWindow MessageBoxW

advapi32

CreateServiceW OpenServiceW LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegCloseKey CloseServiceHandle OpenSCManagerW RegCreateKeyExW RegSetValueExW OpenProcessToken StartServiceW RegOpenKeyExW

ole32

CoCreateInstance CoGetObject CoInitializeEx CoUninitialize

shell32

ord680

oleaut32

SysFreeString SysAllocString VariantClear VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

9a47cc83a9b80d55a5e96033bfc71d49f9e5b9a0c83d7185d9b9445044c6c07a

kernel32

user32

advapi32

ole32

shell32

oleaut32

generic