6651b94fca97496297e88b8f4fa9de77

General

Target
6651b94fca97496297e88b8f4fa9de77
Size 1.1MB
Sample240118-3he5qagcbn
SHA256 ba8e97e341fadadb0789c21d7d78b98b5194e3cfeff41c8c7e22b422321c5417
MD5 6651b94fca97496297e88b8f4fa9de77
SHA1 6a32236977388626a6f6c378a1d3b6291f9b7b31
SHA512 95343f8ac9dc4a1fdbc6d5ccff8074d4615e0f7e4d84c9025db1313234ef6de799f7637bef4198cae80653b1aa14ff2caa16f704a158e30886c65df8302129aa
SSDEEP 24576:osux3BbFLhaJS8B7IVO+VtRl8ERPd0NCcb0wXXsSlyrLz:gdaJS87IVO+Vp8ElSNCMXXXK3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6651b94fca97496297e88b8f4fa9de77

File Explorer

6651b94fca97496297e88b8f4fa9de77

.exe 1.1MB

6651b94fca97496297e88b8f4fa9de77

IMPHASH 010b99662693ba25ba201961c31754d2
SHA256 ba8e97e341fadadb0789c21d7d78b98b5194e3cfeff41c8c7e22b422321c5417
MD5 6651b94fca97496297e88b8f4fa9de77
SHA1 6a32236977388626a6f6c378a1d3b6291f9b7b31
SHA512 95343f8ac9dc4a1fdbc6d5ccff8074d4615e0f7e4d84c9025db1313234ef6de799f7637bef4198cae80653b1aa14ff2caa16f704a158e30886c65df8302129aa
SSDEEP 24576:osux3BbFLhaJS8B7IVO+VtRl8ERPd0NCcb0wXXsSlyrLz:gdaJS87IVO+Vp8ElSNCMXXXK3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

976086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLongPathNameA GetUserDefaultLangID AddRefActCtx GetCPInfoExW WriteConsoleInputA ReadConsoleInputW GetConsoleAliasW SetCommTimeouts SetConsoleCP VerifyVersionInfoA WaitNamedPipeA CreateMutexA WriteConsoleW GetLastError CreateFileA WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA SetStdHandle LoadLibraryA RequestDeviceWakeup FindFirstVolumeA ReadFile BuildCommDCBA VerLanguageNameW SetFileApisToANSI WriteProcessMemory RequestWakeupLatency ResetEvent Sleep EndUpdateResourceW GetCPInfo SetConsoleCtrlHandler SetConsoleTitleA GenerateConsoleCtrlEvent EraseTape SetConsoleTextAttribute AttachConsole GetConsoleAliasesLengthW ZombifyActCtx ReadConsoleOutputW GetSystemWindowsDirectoryA GetStringTypeW BuildCommDCBAndTimeoutsA HeapAlloc HeapLock GetAtomNameW HeapReAlloc HeapValidate GetGeoInfoA GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetVersionExA GetACP WaitForMultipleObjects WaitForSingleObject GetSystemPowerStatus WriteConsoleOutputCharacterA LocalAlloc GetMailslotInfo SetEnvironmentVariableW GetFileAttributesExA GetComputerNameW CommConfigDialogA GetConsoleWindow PostQueuedCompletionStatus GetDiskFreeSpaceW LeaveCriticalSection EnumDateFormatsA GetCurrentConsoleFont InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW DeleteCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetFilePointer TerminateProcess IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP MultiByteToWideChar GetStringTypeA LCMapStringA LCMapStringW CloseHandle

user32

GetAltTabInfoW

gdi32

GetCharWidth32A

advapi32

AdjustTokenPrivileges BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

6651b94fca97496297e88b8f4fa9de77

kernel32

user32

gdi32

advapi32

generic