64b8ce71634358d220c7eb599a73556d

General

Target
64b8ce71634358d220c7eb599a73556d
Size 337KB
Sample240118-hcgfdafae9
SHA256 ef925865b194ddd0d59233fec99f8e3608a623c3d4f7eaaf34b9af57f9bb0a82
MD5 64b8ce71634358d220c7eb599a73556d
SHA1 06d0687b32181d1611d20c60078526850049e38b
SHA512 54ed51ed7ce72d0f4045b5a7f253ee88d503196085e0497fd4ef8599254bce570161da43b6ac949a15629f1f58777971696eaea6e4dd345e6ae0f8d698f48ba4
SSDEEP 6144:HzW9OawmfBcAqh3SBUjSLxRtx0RfoqZi378JHoAE3MXue5TUakec:HPlmfOUUjSlx0Rhi3WHon8JTUa9c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b8ce71634358d220c7eb599a73556d

File Explorer

64b8ce71634358d220c7eb599a73556d

.exe 337KB

64b8ce71634358d220c7eb599a73556d

IMPHASH 4eb4fa387aa9e72a2c5a5335b8957253
SHA256 ef925865b194ddd0d59233fec99f8e3608a623c3d4f7eaaf34b9af57f9bb0a82
MD5 64b8ce71634358d220c7eb599a73556d
SHA1 06d0687b32181d1611d20c60078526850049e38b
SHA512 54ed51ed7ce72d0f4045b5a7f253ee88d503196085e0497fd4ef8599254bce570161da43b6ac949a15629f1f58777971696eaea6e4dd345e6ae0f8d698f48ba4
SSDEEP 6144:HzW9OawmfBcAqh3SBUjSLxRtx0RfoqZi378JHoAE3MXue5TUakec:HPlmfOUUjSlx0Rhi3WHon8JTUa9c
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

26355

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleW CreateFileW CloseHandle DecodePointer GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx VirtualProtect LCMapStringW GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW CreateThread Sleep GetProcessHeap TerminateThread GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc RaiseException

user32

DefWindowProcW PostQuitMessage CreateWindowExA CreateWindowExW DestroyWindow EnableWindow SetForegroundWindow GetWindowRect GetWindowTextA MessageBoxA GetWindowTextLengthA UpdateWindow GetDC GrayStringA DispatchMessageW TranslateMessage GetMessageW AppendMenuW CreateMenu SetMenu LoadIconW RegisterClassW FillRect SetWindowTextA EndPaint BeginPaint SendMessageA GetWindow SetActiveWindow SendMessageW MessageBoxW

gdi32

SetDCPenColor GetStockObject SetBkMode

ws2_32

send closesocket connect htons recv socket gethostbyname WSAStartup WSACleanup

Sharing

General

Malware Config

Signatures

File Explorer

64b8ce71634358d220c7eb599a73556d

kernel32

user32

gdi32

ws2_32

generic