6615aa0abe60e6936e7ebdb0a360e3c7[.]exe

General

Target
6615aa0abe60e6936e7ebdb0a360e3c7.exe
Size 370KB
Sample230620-hkr7vaae78
SHA256 12a30c24bb134a67991020d063ae6dd5ec4c941d14d53fb8e0df13ecbe20ab8a
MD5 6615aa0abe60e6936e7ebdb0a360e3c7
SHA1 bb22997490d7a1a77bf8c02c46bb53edf6187d5b
SHA512 516a10498a3f2f23b0469a9da078b9b26435ab3b2f1448327e2234ac702ee07d8051e9cd7455c42a7daf6ed7474986eae533c74b3dbdb1ee65e671eb0c798f91
SSDEEP 6144:ZN584CunwyVR85xMS9GmDNVMY4Gyt2zHAluOp:J84Cuw2R85x/LuYX2F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6615aa0abe60e6936e7ebdb0a360e3c7.exe

File Explorer

6615aa0abe60e6936e7ebdb0a360e3c7.exe

.exe 370KB

6615aa0abe60e6936e7ebdb0a360e3c7.exe

IMPHASH 2678d64d9aab251c39f4a926feb15079
SHA256 12a30c24bb134a67991020d063ae6dd5ec4c941d14d53fb8e0df13ecbe20ab8a
MD5 6615aa0abe60e6936e7ebdb0a360e3c7
SHA1 bb22997490d7a1a77bf8c02c46bb53edf6187d5b
SHA512 516a10498a3f2f23b0469a9da078b9b26435ab3b2f1448327e2234ac702ee07d8051e9cd7455c42a7daf6ed7474986eae533c74b3dbdb1ee65e671eb0c798f91
SSDEEP 6144:ZN584CunwyVR85xMS9GmDNVMY4Gyt2zHAluOp:J84Cuw2R85x/LuYX2F
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23444

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW ClearCommError SetUnhandledExceptionFilter ReadConsoleA InterlockedDecrement GetLogicalDriveStringsW GetComputerNameW UnlockFile GetTickCount GetConsoleAliasesA FormatMessageA GetWindowsDirectoryA SetCommTimeouts GetVolumePathNameW FindResourceExA SetCommConfig ReadConsoleInputA WriteConsoleOutputA GetStringTypeExW FindNextVolumeW WriteConsoleW ReplaceFileW GetModuleFileNameW GetCompressedFileSizeA GetACP VirtualQuery SetCurrentDirectoryA GetLogicalDriveStringsA GetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW LoadLibraryA OpenMutexA MoveFileA CreateFileMappingW GetModuleHandleA PurgeComm GetCurrentDirectoryA OpenSemaphoreW FindFirstVolumeA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId LCMapStringW LCMapStringA CreateMutexW SetFilePointer GetDateFormatW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCommandLineA GetStartupInfoA UnhandledExceptionFilter HeapFree RtlUnwind RaiseException HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize ExitProcess TerminateProcess GetCurrentProcess IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount

user32

CharUpperBuffW LoadMenuW GetSysColorBrush SetCaretPos CharToOemBuffA

gdi32

GetTextExtentPointW

advapi32

ReportEventA ReadEventLogW

Sharing