6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45

General

Target
6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45
Size 268KB
Sample230927-p4cd3aca78
SHA256 6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45
MD5 fb36cdbfd2a29c6da74304f5805cac81
SHA1 f736dbf1d9c5f128ac5378ed67f3ba4ec525e69e
SHA512 7a3fcf2494a709dc66c1ad76db160cae192037fa12bfb42d680f6bb9bb27c482465ba381c34396156c7028ba1c439b84fb6a5a9bc3b7a2df041da58cc415812b
SSDEEP 3072:V1iZT3obs2P5DRp3/P6eiyGG4/xNnbWdVt29CWj3roKh5JnVBEkZMxNTxGt:bOobdp3/PIyx4baLt2RA8bEkZMxNT4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45

File Explorer

6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45

.exe 268KB

6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45

IMPHASH c979a88e8595d029726dd8a9185ca5bc
SHA256 6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45
MD5 fb36cdbfd2a29c6da74304f5805cac81
SHA1 f736dbf1d9c5f128ac5378ed67f3ba4ec525e69e
SHA512 7a3fcf2494a709dc66c1ad76db160cae192037fa12bfb42d680f6bb9bb27c482465ba381c34396156c7028ba1c439b84fb6a5a9bc3b7a2df041da58cc415812b
SSDEEP 3072:V1iZT3obs2P5DRp3/P6eiyGG4/xNnbWdVt29CWj3roKh5JnVBEkZMxNTxGt:bOobdp3/PIyx4baLt2RA8bEkZMxNT4
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20769

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW GetSystemWindowsDirectoryW FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetNumberFormatA ReadConsoleW GetGeoInfoW GetDateFormatA ReadConsoleInputA GetThreadSelectorEntry AssignProcessToJobObject SizeofResource SetVolumeMountPointA GetProcessHandleCount HeapCreate TransactNamedPipe GetFileAttributesW IsDBCSLeadByte CreateFileW GetACP GetLastError SetLastError GetProcAddress VirtualAlloc BackupWrite InterlockedDecrement LoadLibraryA InterlockedExchangeAdd OpenWaitableTimerW WritePrivateProfileStringA CreateHardLinkW AddAtomW BeginUpdateResourceA SetConsoleWindowInfo GetCommMask OpenJobObjectW FoldStringW CreatePipe FindNextFileA GetShortPathNameW OpenSemaphoreW FindFirstVolumeA FindFirstVolumeW ReadConsoleOutputCharacterW LocalFileTimeToFileTime GetProcessHeap SetEndOfFile VirtualQuery EnumResourceNamesW GetTempFileNameA DebugActiveProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc RaiseException VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize RtlUnwind MultiByteToWideChar ReadFile InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage CloseHandle CreateFileA SetStdHandle GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

ChangeDisplaySettingsW LoadMenuA GetClassInfoExW GetScrollInfo CharToOemBuffW GetMessageExtraInfo

gdi32

SetColorAdjustment

advapi32

InitiateSystemShutdownA SetKernelObjectSecurity

Sharing

General

Malware Config

Signatures

File Explorer

6e17689077e60d71122d9edfb45726f8907a146d3b68549614d7e29f697d5c45

kernel32

user32

gdi32

advapi32