8e6d0a14833bf00bcbcaa0492855996f

General

Target
8e6d0a14833bf00bcbcaa0492855996f
Size 280KB
Sample231222-p172kabaaj
SHA256 61299e2bc72f636830b6507ef2c359ec51c0ad519cd44c4678005090b85c26e7
MD5 8e6d0a14833bf00bcbcaa0492855996f
SHA1 d778bb8ef2d2f5e5a78f24ed0b4706169fadc73e
SHA512 c23991bc1b1e608fe9237f25516b04646deb27185a8c56217b5a87802d30ffd87c91884a47ac4bba9fcb05565acc1f4b2b66a86d15f0ac18bb2dbdac90031212
SSDEEP 6144:iGk6MwF3TlX34uOKOZGO2qJMIVoxeqPsy3:ZRTlX34cOZGOlJMIVqD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e6d0a14833bf00bcbcaa0492855996f

File Explorer

8e6d0a14833bf00bcbcaa0492855996f

.exe 280KB

8e6d0a14833bf00bcbcaa0492855996f

IMPHASH 400fbb4d0298c92dcf0f4177f613bae0
SHA256 61299e2bc72f636830b6507ef2c359ec51c0ad519cd44c4678005090b85c26e7
MD5 8e6d0a14833bf00bcbcaa0492855996f
SHA1 d778bb8ef2d2f5e5a78f24ed0b4706169fadc73e
SHA512 c23991bc1b1e608fe9237f25516b04646deb27185a8c56217b5a87802d30ffd87c91884a47ac4bba9fcb05565acc1f4b2b66a86d15f0ac18bb2dbdac90031212
SSDEEP 6144:iGk6MwF3TlX34uOKOZGO2qJMIVoxeqPsy3:ZRTlX34cOZGOlJMIVqD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime GetNativeSystemInfo lstrlenA CopyFileExW GetStringTypeA GetCPInfo InterlockedIncrement ReadConsoleA InterlockedDecrement CompareFileTime GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags TerminateProcess ReadFile SetThreadPriority GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA GetStartupInfoA SetThreadLocale GetLastError GetProcAddress GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA Process32FirstW GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA CreateIoCompletionPort QueryMemoryResourceNotification EnumResourceNamesA GetCPInfoExA TlsAlloc ReadConsoleOutputCharacterW GetSystemTime DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

8e6d0a14833bf00bcbcaa0492855996f

kernel32

user32

msimg32

generic