66ddd1f7161f5414894e3ecb4dab4018

Sharing

Copy URL Twitter E-mail

General

Target
66ddd1f7161f5414894e3ecb4dab4018
Size 147KB
Sample231226-md3gfsebdm
SHA256 f434b4def613d5398e88ce3b43b5c1536527133452e2bde9952c4856acb39599
MD5 66ddd1f7161f5414894e3ecb4dab4018
SHA1 4b94a619266c8bbdcfb0e6aadcb3ba441bfd3e55
SHA512 222afa2db1ed1b9b496c25b204ca5a97242ccad6950ca8e8797fe35eb63bd800cd4a373911367235ab1c0ca6f214e3b300162179de55c22d24e21d96b8465b3d
SSDEEP 3072:6OVJ25Boc6Cmka/pqqsFUCN3R9MI+IJiRUw86P2LcF3S9taftxpj8d+Ll:6OfE6Cmkaxs3NBBMRVP2z9wjp/x
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66ddd1f7161f5414894e3ecb4dab4018

File Explorer

66ddd1f7161f5414894e3ecb4dab4018

.exe 147KB

66ddd1f7161f5414894e3ecb4dab4018

IMPHASH 4e73db19151d1ed485c4843f251684e3
SHA256 f434b4def613d5398e88ce3b43b5c1536527133452e2bde9952c4856acb39599
MD5 66ddd1f7161f5414894e3ecb4dab4018
SHA1 4b94a619266c8bbdcfb0e6aadcb3ba441bfd3e55
SHA512 222afa2db1ed1b9b496c25b204ca5a97242ccad6950ca8e8797fe35eb63bd800cd4a373911367235ab1c0ca6f214e3b300162179de55c22d24e21d96b8465b3d
SSDEEP 3072:6OVJ25Boc6Cmka/pqqsFUCN3R9MI+IJiRUw86P2LcF3S9taftxpj8d+Ll:6OfE6Cmkaxs3NBBMRVP2z9wjp/x
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey RegSetValueExA RegConnectRegistryA OpenSCManagerA LockServiceDatabase OpenServiceA ChangeServiceConfigA StartServiceA CloseServiceHandle UnlockServiceDatabase EnumServicesStatusA ControlService DeleteService

shell32

FindExecutableA ShellExecuteA

mpr

WNetAddConnection2A WNetCancelConnection2A WNetOpenEnumA WNetEnumResourceA WNetCloseEnum WNetGetConnectionA

kernel32

GetDriveTypeA GetWindowsDirectoryA GetComputerNameA GetLastError Sleep GetModuleFileNameA GetLocalTime CreateThread OpenMutexA ReleaseMutex CreateMutexA CloseHandle GetVersionExA CreateFileA CreateFileMappingA MapViewOfFile WriteFile SetFilePointer FindFirstFileA FindNextFileA FindClose OpenProcess TerminateProcess CreateToolhelp32Snapshot Process32First Process32Next LoadLibraryA GetProcAddress FreeLibrary GetSystemTimeAsFileTime SetConsoleCtrlHandler GetStartupInfoA GetModuleHandleA VirtualAlloc VirtualQuery HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize HeapValidate ExitProcess RtlUnwind GetFileType GetStdHandle GetCurrentProcess DuplicateHandle SetHandleCount GetCommandLineA GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetTimeZoneInformation SetStdHandle DeleteFileA ReadFile SetEndOfFile

user32

GetWindowTextA GetWindowThreadProcessId EnumWindows

ws2_32

socket htonl htons bind recvfrom sendto WSAStartup WSACleanup inet_addr gethostbyname gethostbyaddr

Sharing

General

Malware Config

Signatures

File Explorer

66ddd1f7161f5414894e3ecb4dab4018

advapi32

shell32

mpr

kernel32

user32

ws2_32

generic