6920aa5adac327d0b77bcbcf2c105098

General

Target
6920aa5adac327d0b77bcbcf2c105098
Size 701KB
Sample240120-br74bahahp
SHA256 b937f9098ea56ff4120f21634aaf765cd11f62950cbcf1f4727cc673785a9560
MD5 6920aa5adac327d0b77bcbcf2c105098
SHA1 750a44564b2a4f5199c3be46183ea7ed12215f29
SHA512 1257bea8df52390bc0a158eabb1a931340fefc18161884d4901ccc2a836d818ffe766850e23311885fdae315a7245303a35eb0970868506bb245fc92c6bb2aad
SSDEEP 12288:u6i7jDNvrm737MOxTAc2NT0c7C4S5JfsZmjb2c36kMtEcZua+rCR8/6Pdfr84elm:zYvkz7Fm07Cwb2cjMScZua+rCR8aIXov
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6920aa5adac327d0b77bcbcf2c105098

File Explorer

6920aa5adac327d0b77bcbcf2c105098

.exe 701KB

6920aa5adac327d0b77bcbcf2c105098

IMPHASH d447818e27b033d337efcc8531718bf1
SHA256 b937f9098ea56ff4120f21634aaf765cd11f62950cbcf1f4727cc673785a9560
MD5 6920aa5adac327d0b77bcbcf2c105098
SHA1 750a44564b2a4f5199c3be46183ea7ed12215f29
SHA512 1257bea8df52390bc0a158eabb1a931340fefc18161884d4901ccc2a836d818ffe766850e23311885fdae315a7245303a35eb0970868506bb245fc92c6bb2aad
SSDEEP 12288:u6i7jDNvrm737MOxTAc2NT0c7C4S5JfsZmjb2c36kMtEcZua+rCR8/6Pdfr84elm:zYvkz7Fm07Cwb2cjMScZua+rCR8aIXov
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumResourceNamesW GetNativeSystemInfo lstrlenA GetStringTypeA InterlockedIncrement ReadConsoleA GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetPrivateProfileStringW WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk Process32NextW CreateIoCompletionPort QueryMemoryResourceNotification GetCPInfoExA TlsAlloc FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

user32

GetComboBoxInfo

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

6920aa5adac327d0b77bcbcf2c105098

kernel32

user32

winhttp

generic