06235e49b7dbd0a883f3c478dbcfa92f

General

Target
06235e49b7dbd0a883f3c478dbcfa92f
Size 13.5MB
Sample231229-2stv7ahedj
SHA256 68d927f4a5b3d4f059795631f21d37ef2c8b7afa4b18d928b9cedf08287de3b4
MD5 06235e49b7dbd0a883f3c478dbcfa92f
SHA1 630124861afd7ae79019fd694c73fe7347ae0bc6
SHA512 caba1e2912458f97e6c35656e9764369fb5527a7c3e468ad688fd1f30b1bdad1ac57d000c2d0215ef70a8a12cc5e8427df107428716eeb356985bd519d2598c9
SSDEEP 98304:dNWUlllllllllllllllllllllllllllllllllllllllllllllllllllllllllll9:7W
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06235e49b7dbd0a883f3c478dbcfa92f

File Explorer

06235e49b7dbd0a883f3c478dbcfa92f

.exe 13.5MB

06235e49b7dbd0a883f3c478dbcfa92f

IMPHASH 1c676b315c855f58eb1b183bbdcbce1a
SHA256 68d927f4a5b3d4f059795631f21d37ef2c8b7afa4b18d928b9cedf08287de3b4
MD5 06235e49b7dbd0a883f3c478dbcfa92f
SHA1 630124861afd7ae79019fd694c73fe7347ae0bc6
SHA512 caba1e2912458f97e6c35656e9764369fb5527a7c3e468ad688fd1f30b1bdad1ac57d000c2d0215ef70a8a12cc5e8427df107428716eeb356985bd519d2598c9
SSDEEP 98304:dNWUlllllllllllllllllllllllllllllllllllllllllllllllllllllllllll9:7W
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

28976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GlobalAlloc LoadLibraryW SetCommConfig SetConsoleMode TerminateProcess GetACP GetStringTypeExA InterlockedCompareExchange ResetEvent CreateEventW SetProcessWorkingSetSize lstrcatW VirtualProtect GetCurrentThreadId FindActCtxSectionStringW LCMapStringW GetStringTypeW GetUserDefaultLCID _lwrite UpdateResourceA FindFirstChangeNotificationW GetNumaNodeProcessorMask EnumDateFormatsExA CreateFileW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection SetStdHandle InitializeCriticalSectionAndSpinCount GetStdHandle DeleteCriticalSection WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsGetValue TlsSetValue InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement GetProcAddress Sleep ExitProcess RtlUnwind WriteConsoleW MultiByteToWideChar SetFilePointer GetModuleFileNameW IsProcessorFeaturePresent GetCPInfo GetOEMCP IsValidCodePage HeapAlloc

user32

GetCursor

advapi32

OpenThreadToken

winhttp

WinHttpCloseHandle

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

06235e49b7dbd0a883f3c478dbcfa92f

kernel32

user32

advapi32

winhttp

msimg32

generic