61297c33ef1218ba0c2f1a01f0739c862c43e520163dc[.]exe

General

Target
61297c33ef1218ba0c2f1a01f0739c862c43e520163dc.exe
Size 1.7MB
Sample221007-z7a1hsdham
SHA256 61297c33ef1218ba0c2f1a01f0739c862c43e520163dc3c1d5a4e1d574c94f6f
MD5 f35437764a84eb1008f884c9a975abf3
SHA1 9db30e9cd660b8478e0152f4cae4a402cb1191f8
SHA512 978150fff36d5e6d23edbde600f7eea5f50087ac8671f9e185475e17f57aac6bb1192a48ec0dc46601e5dcf2f72070ea4e6c157a745843ce441dad2bc6dfeb76
SSDEEP 24576:mk70TrcxWql4GRxFQzu74aXcm6bKvaKeozruZD2+OeL7xH7PpiFNzU2J:mkQTAxWDGRr//tuZDfHhYNo2J
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

61297c33ef1218ba0c2f1a01f0739c862c43e520163dc.exe

.exe 1.7MB

61297c33ef1218ba0c2f1a01f0739c862c43e520163dc.exe

IMPHASH bf5a4aa99e5b160f8521cadd6bfe73b8
SHA256 61297c33ef1218ba0c2f1a01f0739c862c43e520163dc3c1d5a4e1d574c94f6f
MD5 f35437764a84eb1008f884c9a975abf3
SHA1 9db30e9cd660b8478e0152f4cae4a402cb1191f8
SHA512 978150fff36d5e6d23edbde600f7eea5f50087ac8671f9e185475e17f57aac6bb1192a48ec0dc46601e5dcf2f72070ea4e6c157a745843ce441dad2bc6dfeb76
SSDEEP 24576:mk70TrcxWql4GRxFQzu74aXcm6bKvaKeozruZD2+OeL7xH7PpiFNzU2J:mkQTAxWDGRr//tuZDfHhYNo2J
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

cc:23:2d:6b:9d:85:b0:80:89:d5:e1:45:5d:b6:d6:e0:2c:17:e2:41:d8:97:0b:38:bb:95:2b:11:a9:df:04:64

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

52527

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException GetLastError MultiByteToWideChar lstrlenA InterlockedDecrement GetProcAddress LoadLibraryA FreeResource SizeofResource LockResource LoadResource FindResourceA GetModuleHandleA Module32Next CloseHandle Module32First CreateToolhelp32Snapshot GetCurrentProcessId SetEndOfFile GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA HeapFree GetProcessHeap HeapAlloc GetCommandLineA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode ReadFile TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId FlushFileBuffers SetFilePointer SetHandleCount GetFileType GetStartupInfoA RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CompareStringA CompareStringW SetEnvironmentVariableA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

ole32

OleInitialize

oleaut32

SafeArrayCreate SafeArrayAccessData SafeArrayUnaccessData SafeArrayDestroy SafeArrayCreateVector VariantClear VariantInit SysFreeString SysAllocString

Name

.text

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

118KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vm_sec

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vlizer

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

61297c33ef1218ba0c2f1a01f0739c862c43e520163dc.exe

PE Signature issue

kernel32

ole32

oleaut32