f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98

General

Target
f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98
Size 416KB
Sample230806-leelcagf76
SHA256 f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98
MD5 86ea3b8bdb2f645d47d177faf622c3e1
SHA1 7af0cc49835dc1951037242962507015ec503baf
SHA512 9f2d9b00b133252dd5eb051c83e0fa41c4e9bbd81e7940f7322c9bca1ad885605f317330e5f43b69dc33dc5a8386817fee0d8a603ddc756b7db68da7b728968c
SSDEEP 6144:h4qmHABcWSa2pBbu7/mi281loEeSehDpi:hBNxNYgdxlRwu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98

File Explorer

f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98

.exe 416KB

f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98

IMPHASH 6082c73542ab5513655f8685ef60d97a
SHA256 f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98
MD5 86ea3b8bdb2f645d47d177faf622c3e1
SHA1 7af0cc49835dc1951037242962507015ec503baf
SHA512 9f2d9b00b133252dd5eb051c83e0fa41c4e9bbd81e7940f7322c9bca1ad885605f317330e5f43b69dc33dc5a8386817fee0d8a603ddc756b7db68da7b728968c
SSDEEP 6144:h4qmHABcWSa2pBbu7/mi281loEeSehDpi:hBNxNYgdxlRwu
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32957

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteVolumeMountPointA InterlockedIncrement MoveFileExW GetConsoleAliasA GetUserDefaultLCID FlushConsoleInputBuffer GetModuleHandleW GetTickCount VirtualFree GenerateConsoleCtrlEvent GetNumberFormatA GetWindowsDirectoryA GetConsoleAliasExesW WaitNamedPipeW GetDateFormatA EnumTimeFormatsW GetUserDefaultLangID GetDriveTypeA GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetConsoleMode TerminateThread _hread GetPrivateProfileStructW GetCalendarInfoA GetConsoleAliasExesLengthW GetTimeFormatW GetFileAttributesW WritePrivateProfileSectionW TerminateProcess QueryInformationJobObject GetOverlappedResult GetStartupInfoW CreateMailslotW GetPrivateProfileIntW InterlockedExchange CreateMutexW OpenMutexW GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress MoveFileW GlobalGetAtomNameA OpenWaitableTimerA InterlockedExchangeAdd LocalAlloc GetFileType BuildCommDCBAndTimeoutsW AddAtomW SetCurrentDirectoryW GetProfileStringA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW QueryPerformanceFrequency PeekConsoleInputA OpenSemaphoreW ReadConsoleInputW LocalSize FindFirstVolumeW GetVolumeNameForVolumeMountPointW MoveFileWithProgressW DebugBreak ResetWriteWatch ReadConsoleOutputCharacterW OpenFileMappingA TlsFree EnumSystemLocalesW DeleteFileA GetComputerNameA SetProcessAffinityMask GetStartupInfoA GetCommandLineW InterlockedDecrement EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA HeapFree HeapAlloc GetCommandLineA HeapSetInformation RaiseException RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo IsProcessorFeaturePresent HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW HeapReAlloc

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing

General

Malware Config

Signatures

File Explorer

f6b5fed2060fc3b039b37a54eb3ee3f92630c11f37c0150a25a3500c7e499e98

kernel32

gdi32

advapi32