f6224542abbf35433c6f296df97691bf

General

Target
f6224542abbf35433c6f296df97691bf
Size 663KB
Sample231228-za8khsbeem
SHA256 ad8a63182b0b115ad427182788e162a8590470fa9c9e52f4e07ee5b1d7d92369
MD5 f6224542abbf35433c6f296df97691bf
SHA1 f3133ae0559aa6920f63c94369f225d768bf5e10
SHA512 9c90ad9f3c703f1bcb70386a219099db566ff089bf5ae3629f50c1a95516ff3ef310f3dc12e61e6d58bca374e54bddaf0dcebba14b4f7ccf24ff3fb861e7ced8
SSDEEP 12288:qimE52e34HWsWtOlkgwtM24VyT7yxpPF4nw9Ni3hA+cDIlFrIbz2wc:T2e34HWsW/tM24VyTmxpdAw9NKhrc0lU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6224542abbf35433c6f296df97691bf

File Explorer

f6224542abbf35433c6f296df97691bf

.exe 663KB

f6224542abbf35433c6f296df97691bf

IMPHASH ca59243ab9216853b8ca72d3a7c666db
SHA256 ad8a63182b0b115ad427182788e162a8590470fa9c9e52f4e07ee5b1d7d92369
MD5 f6224542abbf35433c6f296df97691bf
SHA1 f3133ae0559aa6920f63c94369f225d768bf5e10
SHA512 9c90ad9f3c703f1bcb70386a219099db566ff089bf5ae3629f50c1a95516ff3ef310f3dc12e61e6d58bca374e54bddaf0dcebba14b4f7ccf24ff3fb861e7ced8
SSDEEP 12288:qimE52e34HWsWtOlkgwtM24VyT7yxpPF4nw9Ni3hA+cDIlFrIbz2wc:T2e34HWsW/tM24VyTmxpdAw9NKhrc0lU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer lstrlenA FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile TlsSetValue GetEnvironmentStrings GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile GetBinaryTypeW ExitThread DeactivateActCtx CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCurrentDirectoryW GetProcAddress VerLanguageNameA CreateNamedPipeA SetStdHandle SetComputerNameA BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW VirtualLock WriteProfileStringA SetConsoleTitleW VirtualProtect CompareStringA GetFileAttributesExW GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW GetModuleHandleA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType GetConsoleCP GetConsoleMode DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

f6224542abbf35433c6f296df97691bf

kernel32

user32

generic