06f47d6c56ea1cf96bd70d113ee661f1

General

Target
06f47d6c56ea1cf96bd70d113ee661f1
Size 527KB
Sample231229-3gy67sfcfr
SHA256 3f9a8485314c2b666caf0a1a729a96cb974780f331ea9baa0c03e7f02035cf05
MD5 06f47d6c56ea1cf96bd70d113ee661f1
SHA1 30f26d59be9ec21bd7c3df0eda359482864702b7
SHA512 8cfdfae74dd186314a804fbe63af5a34714ee20a462dcfabf6c164e51e821c44915edec56a4a0433083a8e025e90c5a6e22064c4811d460d2a9aac54f4ac389e
SSDEEP 12288:SBn0RN617gNm5YnXDdRgMVahjLySXJGejXhB75Kc3YEuIHdC:SBn0RNlDdRg6axmSgoRBUzIHdC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f47d6c56ea1cf96bd70d113ee661f1

File Explorer

06f47d6c56ea1cf96bd70d113ee661f1

.exe 527KB

06f47d6c56ea1cf96bd70d113ee661f1

IMPHASH 97750a00050e37c7b56da7bc3864f0f1
SHA256 3f9a8485314c2b666caf0a1a729a96cb974780f331ea9baa0c03e7f02035cf05
MD5 06f47d6c56ea1cf96bd70d113ee661f1
SHA1 30f26d59be9ec21bd7c3df0eda359482864702b7
SHA512 8cfdfae74dd186314a804fbe63af5a34714ee20a462dcfabf6c164e51e821c44915edec56a4a0433083a8e025e90c5a6e22064c4811d460d2a9aac54f4ac389e
SSDEEP 12288:SBn0RN617gNm5YnXDdRgMVahjLySXJGejXhB75Kc3YEuIHdC:SBn0RNlDdRg6axmSgoRBUzIHdC
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dbghelp

MiniDumpWriteDump

kernel32

CreateFileW GetFileSize ReadFile SetFilePointer WriteFile CloseHandle GetCurrentProcess GetCurrentProcessId VirtualProtect SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize SetConsoleCtrlHandler GetProcessHeap LCMapStringW DecodePointer GetTimeFormatW GetDateFormatW OutputDebugStringW OutputDebugStringA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW GetStringTypeW SetStdHandle SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW CompareStringW SetLastError QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError WriteConsoleW EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle GetModuleFileNameW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetCurrentThread GetFileType FindClose FindFirstFileExA FindFirstFileExW FindNextFileA

user32

LoadIconW LoadCursorW GetWindowLongW MessageBeep MessageBoxW GetWindowTextW SetWindowTextW EndPaint BeginPaint GetDC UpdateWindow GrayStringA TranslateAcceleratorW LoadAcceleratorsW SendDlgItemMessageW GetDlgItem EndDialog DialogBoxParamW ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW TranslateMessage GetMessageW LoadStringW

comdlg32

GetOpenFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

06f47d6c56ea1cf96bd70d113ee661f1

dbghelp

kernel32

user32

comdlg32

generic