61991835eb95b1e55149870fe5ccc34e

Sharing

Copy URL Twitter E-mail

General

Target
61991835eb95b1e55149870fe5ccc34e
Size 1.1MB
Sample240117-drt8kaffdr
SHA256 b62fb2f1684610666395f4bb27c1f4212f80299895332e5746f0c97c70180169
MD5 61991835eb95b1e55149870fe5ccc34e
SHA1 a38c4824aa605269de61e4817c6b66e631e4f258
SHA512 5e840d8eae419e40bff4579d48709c7d278f3bbcd6411ac1a0595e22641f0fd19200a5225c5c394f2bd9a602357f048969aebc9a3ac75897aeef7a3dfd02796e
SSDEEP 12288:kM+ZdkmHubeaCo6Lga1w2A/sUQBJ8Qvp:kMcpTo6sg+0BOE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61991835eb95b1e55149870fe5ccc34e

File Explorer

61991835eb95b1e55149870fe5ccc34e

.exe 1.1MB

61991835eb95b1e55149870fe5ccc34e

IMPHASH 9e8f80efadaf14eb472507064b44e82c
SHA256 b62fb2f1684610666395f4bb27c1f4212f80299895332e5746f0c97c70180169
MD5 61991835eb95b1e55149870fe5ccc34e
SHA1 a38c4824aa605269de61e4817c6b66e631e4f258
SHA512 5e840d8eae419e40bff4579d48709c7d278f3bbcd6411ac1a0595e22641f0fd19200a5225c5c394f2bd9a602357f048969aebc9a3ac75897aeef7a3dfd02796e
SSDEEP 12288:kM+ZdkmHubeaCo6Lga1w2A/sUQBJ8Qvp:kMcpTo6sg+0BOE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

375440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FormatMessageA LocalAlloc FreeLibrary InterlockedExchange GetModuleFileNameA CreateEventA GetModuleHandleA SetPriorityClass GetCurrentThread GetCommandLineA GetEnvironmentVariableA SetConsoleCtrlHandler GetCurrentProcess DuplicateHandle GetStdHandle GetPriorityClass CreateProcessA SetStdHandle SetLastError GetVersionExA LoadLibraryA GetProcAddress InitializeCriticalSection RaiseException CreateNamedPipeA CreateFileA GetLastError AllocConsole OutputDebugStringA WriteFile ExitProcess InterlockedDecrement ReadFile GetCurrentProcessId SetEvent Sleep LeaveCriticalSection InterlockedIncrement EnterCriticalSection WaitForSingleObject CloseHandle SetThreadPriority CreateThread VirtualAlloc GetModuleHandleW

user32

LoadIconA

gdi32

TextOutA StartPage StartDocA SetTextColor SetMapMode SetBkMode SetBkColor SelectObject SelectClipRgn MoveToEx LineTo GetTextMetricsW GetTextFaceA GetTextExtentPoint32A GetStockObject GetRgnBox GetObjectW GetDeviceCaps GdiFlush EndPage EndDoc DeleteObject DeleteDC CreateSolidBrush CreateRectRgnIndirect CreatePen CreateFontA CreateFontW CreateDIBSection CreateDCW CreateCompatibleDC CombineRgn BitBlt GetEnhMetaFileA GetEnhMetaFileW

advapi32

RegOpenKeyW

Name

.text

Size

366KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

607KB

Virtual Size

607KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

y1tta26

Size

512B

Virtual Size

345B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

y1tta25

Size

512B

Virtual Size

345B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

y1tta24

Size

512B

Virtual Size

345B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

y1tta

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

61991835eb95b1e55149870fe5ccc34e

kernel32

user32

gdi32

advapi32

generic