d6c32f65cf717c4ed4889940eaf73136

General

Target
d6c32f65cf717c4ed4889940eaf73136
Size 285KB
Sample231220-ss3nnaegcl
SHA256 51bdaba28bc505c170242ebfb47847e54ff18202502f0e5d907196a0074fa254
MD5 d6c32f65cf717c4ed4889940eaf73136
SHA1 4752b629a82efde198a24bbd14d69a970aaffb40
SHA512 3362ca0a6852ba07ce97e7e7b37a23605ec59a748d7432b0659eb95c095289625e5cadc09db5351095cfcabe93ee857e40b0d69cab7854ddb8d708e711486261
SSDEEP 3072:3UnOYAZKvDVRvGmdPEq+B9ncf125bb20AyFhfHEYCHYS2ZOuSCK4HxLSbaG9jH2M:3UORZKXuq+Pct25b/230xFHxLS+G59KK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c32f65cf717c4ed4889940eaf73136

File Explorer

d6c32f65cf717c4ed4889940eaf73136

.exe 285KB

d6c32f65cf717c4ed4889940eaf73136

IMPHASH b3447c394869d3e708c4373cd10a2b6b
SHA256 51bdaba28bc505c170242ebfb47847e54ff18202502f0e5d907196a0074fa254
MD5 d6c32f65cf717c4ed4889940eaf73136
SHA1 4752b629a82efde198a24bbd14d69a970aaffb40
SHA512 3362ca0a6852ba07ce97e7e7b37a23605ec59a748d7432b0659eb95c095289625e5cadc09db5351095cfcabe93ee857e40b0d69cab7854ddb8d708e711486261
SSDEEP 3072:3UnOYAZKvDVRvGmdPEq+B9ncf125bb20AyFhfHEYCHYS2ZOuSCK4HxLSbaG9jH2M:3UORZKXuq+Pct25b/230xFHxLS+G59KK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue InterlockedIncrement GetCommState GetProfileStringW UnlockFile CallNamedPipeW FreeEnvironmentStringsA GetNumberFormatA FindResourceExA GlobalAlloc GetPrivateProfileIntA GetConsoleAliasExesLengthW HeapDestroy CreateSemaphoreA EnumResourceLanguagesA GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW lstrlenW LCMapStringA GetStartupInfoA SetThreadLocale GetStdHandle CopyFileExW FreeLibraryAndExitThread GetLastError GetProcAddress CreateNamedPipeA EnterCriticalSection LoadLibraryA OpenMutexA WritePrivateProfileStringA SetThreadIdealProcessor FindAtomA SetSystemTime FindNextFileA WriteProfileStringA CreateIoCompletionPort GetModuleHandleA FindFirstChangeNotificationA HeapSetInformation GetCurrentDirectoryA SetFileShortNameA FindAtomW UnregisterWaitEx GetSystemTime DeleteFileA GetVolumeInformationW LocalFileTimeToFileTime GetThreadContext GetCPInfoExW GetCommandLineW WideCharToMultiByte EncodePointer DecodePointer GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InterlockedDecrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW SetLastError HeapValidate IsBadReadPtr ExitProcess LeaveCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate WriteFile IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree SetStdHandle FlushFileBuffers RaiseException CreateFileW CloseHandle

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

d6c32f65cf717c4ed4889940eaf73136

kernel32

advapi32

winhttp

generic