6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114

General

Target
6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114
Size 260KB
Sample230612-x1mdvsdd65
SHA256 6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114
MD5 d5916cb2ff52e0411bc80a716b2aa528
SHA1 98baa0c511f8595f3a8b28c5ae1d69717b855791
SHA512 618ef15305dd64d82e65e81fee659a59313998fab0d493accc122cc6795abbffcf1e31bcb1aff34413706c220777b3834a8f46240e60aca85e8d1d523f990deb
SSDEEP 6144:woGZATIJ/rRDAmZ0CI1jp8qTiAS1fW0PBJ+Y:woGGTM/hnZ0VayYv+Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114

File Explorer

6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114

.dll 260KB

6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114

IMPHASH ecf8c50c00e92a66342ac4c56bc8d1f7
SHA256 6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114
MD5 d5916cb2ff52e0411bc80a716b2aa528
SHA1 98baa0c511f8595f3a8b28c5ae1d69717b855791
SHA512 618ef15305dd64d82e65e81fee659a59313998fab0d493accc122cc6795abbffcf1e31bcb1aff34413706c220777b3834a8f46240e60aca85e8d1d523f990deb
SSDEEP 6144:woGZATIJ/rRDAmZ0CI1jp8qTiAS1fW0PBJ+Y:woGGTM/hnZ0VayYv+Y
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

52510

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetAsyncKeyState GetKeyState VkKeyScanExW MapVirtualKeyW CallNextHookEx GetKeyNameTextW GetKeyboardLayout UnhookWindowsHookEx SetWindowsHookExW

kernel32

GetStringTypeW CreateFileW DecodePointer WriteConsoleW CloseHandle SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetConsoleCP GetACP HeapAlloc LCMapStringW HeapFree FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStdHandle GetFileType HeapSize HeapReAlloc SetStdHandle WriteFile FlushFileBuffers GetConsoleMode

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114

user32

kernel32