6197843be7a6c4c892e011badb7cc197

General

Target
6197843be7a6c4c892e011badb7cc197
Size 333KB
Sample240117-dpklcagec9
SHA256 588be3b08f83d07a707390599f0cf936e401ed307318d24e9fdc91f66903b3a3
MD5 6197843be7a6c4c892e011badb7cc197
SHA1 2081fb0235323290ee7adef233a171607a81bb49
SHA512 7376c9dde62f77fd43e5418e9945888776e1c0b1541dbd9d87d4b6a2a45e8bce70de3f6dd6ba2504201c801bb252564c0575c3d5663a5d2cf7adcaf27409b80e
SSDEEP 6144:aX9Y66H/Bcgqh3SB+sPeex/aHeKOILYPohjObwYJ42GTHdwhhfaB:aCPH/O0+DexUOI8PSjVHwhhG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6197843be7a6c4c892e011badb7cc197

File Explorer

6197843be7a6c4c892e011badb7cc197

.exe 333KB

6197843be7a6c4c892e011badb7cc197

IMPHASH 4eb4fa387aa9e72a2c5a5335b8957253
SHA256 588be3b08f83d07a707390599f0cf936e401ed307318d24e9fdc91f66903b3a3
MD5 6197843be7a6c4c892e011badb7cc197
SHA1 2081fb0235323290ee7adef233a171607a81bb49
SHA512 7376c9dde62f77fd43e5418e9945888776e1c0b1541dbd9d87d4b6a2a45e8bce70de3f6dd6ba2504201c801bb252564c0575c3d5663a5d2cf7adcaf27409b80e
SSDEEP 6144:aX9Y66H/Bcgqh3SB+sPeex/aHeKOILYPohjObwYJ42GTHdwhhfaB:aCPH/O0+DexUOI8PSjVHwhhG
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

26259

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleW CreateFileW CloseHandle DecodePointer GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx VirtualProtect LCMapStringW GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW CreateThread Sleep GetProcessHeap TerminateThread GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc RaiseException

user32

DefWindowProcW PostQuitMessage CreateWindowExA CreateWindowExW DestroyWindow EnableWindow SetForegroundWindow GetWindowRect GetWindowTextA MessageBoxA GetWindowTextLengthA UpdateWindow GetDC GrayStringA DispatchMessageW TranslateMessage GetMessageW AppendMenuW CreateMenu SetMenu LoadIconW RegisterClassW FillRect SetWindowTextA EndPaint BeginPaint SendMessageA GetWindow SetActiveWindow SendMessageW MessageBoxW

gdi32

SetDCPenColor GetStockObject SetBkMode

ws2_32

send closesocket connect htons recv socket gethostbyname WSAStartup WSACleanup

Sharing

General

Malware Config

Signatures

File Explorer

6197843be7a6c4c892e011badb7cc197

kernel32

user32

gdi32

ws2_32

generic