6f8538fe93e6761ce8b120f2a6069183[.]exe

General

Target
6f8538fe93e6761ce8b120f2a6069183.exe
Size 293KB
Sample231215-dk6m1sabbl
SHA256 8eb6a3a3ba316ea4dc3f609bdfc9779492c649887fc84f525bc4d1ffe0ea7634
MD5 6f8538fe93e6761ce8b120f2a6069183
SHA1 d7ee9bb2bedc1ed613659ce91d4265e38d2af46e
SHA512 63ff7d66497df4a1e1e1de33579f29190846750cf0444deeec77dc092d7b0e4b6634a81610e6bb16764efe8d8b73b2e3dc097a591dcafbcda810ce534a5659b3
SSDEEP 3072:koLTa8r983LVIgZ7tf+VwJ0WiWpAXBA5iWZv5TsQ:koLmaG76gZ7tQJ0v5T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f8538fe93e6761ce8b120f2a6069183.exe

File Explorer

6f8538fe93e6761ce8b120f2a6069183.exe

.exe 293KB

6f8538fe93e6761ce8b120f2a6069183.exe

IMPHASH 25a2cb644b3524e5439412cd0304802e
SHA256 8eb6a3a3ba316ea4dc3f609bdfc9779492c649887fc84f525bc4d1ffe0ea7634
MD5 6f8538fe93e6761ce8b120f2a6069183
SHA1 d7ee9bb2bedc1ed613659ce91d4265e38d2af46e
SHA512 63ff7d66497df4a1e1e1de33579f29190846750cf0444deeec77dc092d7b0e4b6634a81610e6bb16764efe8d8b73b2e3dc097a591dcafbcda810ce534a5659b3
SSDEEP 3072:koLTa8r983LVIgZ7tf+VwJ0WiWpAXBA5iWZv5TsQ:koLmaG76gZ7tQJ0v5T
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13004

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom FindFirstChangeNotificationW EnumCalendarInfoA GetConsoleAliasesLengthW EndUpdateResourceW InterlockedIncrement GetCurrentProcess SetComputerNameW GetComputerNameW OpenSemaphoreA GetModuleHandleW GetProcessHeap SizeofResource GetSystemWindowsDirectoryA Beep GetVolumePathNameA LCMapStringA InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead CreateFileA VirtualAlloc BeginUpdateResourceW LoadLibraryA CreateFileMappingA LocalAlloc FindFirstVolumeMountPointW FindAtomA GlobalFindAtomW CreateIoCompletionPort OpenFileMappingW RequestDeviceWakeup VirtualProtect SetCalendarInfoA GetVersionExA TerminateJobObject EnumResourceLanguagesW GlobalAddAtomW TlsFree GetProcAddress GetFullPathNameW UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TerminateProcess IsDebuggerPresent HeapAlloc HeapFree HeapSize DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapReAlloc GetModuleHandleA

user32

DdeQueryStringW IsWindowEnabled

gdi32

GetDeviceGammaRamp

Sharing