6c0f27024f875a94386862cfb5f0d2c8

General

Target
6c0f27024f875a94386862cfb5f0d2c8
Size 773KB
Sample240121-cdx7macdhm
SHA256 f2dae5d58761bc67d2fac18381a2ee7e61d5eea79c32c718a7b97ec183a2489a
MD5 6c0f27024f875a94386862cfb5f0d2c8
SHA1 d104d6a3977eb2eff0a2ffdf6d6214fbfb25ce6e
SHA512 1f3aa6a4fa0b1ddfd009c5fcf901d51f16f9bd220ccfeb84cf9f457d3d54f5377e8e627578b5499b0726679771648bc7a56f4bff0c49a9e8d2391680ae2cdde4
SSDEEP 24576:FZxGgT1VmLaPXuQCyqph+y48dlT000Hp:8gTmbZhW8bTh0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c0f27024f875a94386862cfb5f0d2c8

File Explorer

6c0f27024f875a94386862cfb5f0d2c8

.exe 773KB

6c0f27024f875a94386862cfb5f0d2c8

IMPHASH f1a12d7f969c04eff5705d2d791fa891
SHA256 f2dae5d58761bc67d2fac18381a2ee7e61d5eea79c32c718a7b97ec183a2489a
MD5 6c0f27024f875a94386862cfb5f0d2c8
SHA1 d104d6a3977eb2eff0a2ffdf6d6214fbfb25ce6e
SHA512 1f3aa6a4fa0b1ddfd009c5fcf901d51f16f9bd220ccfeb84cf9f457d3d54f5377e8e627578b5499b0726679771648bc7a56f4bff0c49a9e8d2391680ae2cdde4
SSDEEP 24576:FZxGgT1VmLaPXuQCyqph+y48dlT000Hp:8gTmbZhW8bTh0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SetPriorityClass GetNativeSystemInfo SetFilePointer CopyFileExW SetLocalTime InterlockedIncrement InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW GetComputerNameW SetEvent FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW FindResourceExA GlobalAlloc LoadLibraryW GetConsoleAliasExesLengthW InitAtomTable CreateSemaphoreA SetConsoleCursorPosition GetFileAttributesW GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult CompareStringW lstrlenW EnumResourceNamesW CreateDirectoryA ReleaseActCtx GetStartupInfoA OpenMutexW GetHandleInformation GetProcAddress GetProcessHeaps ReadFileEx DisableThreadLibraryCalls LoadLibraryA GetConsoleScreenBufferInfo GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA WriteProfileStringA CreateIoCompletionPort GetCurrentDirectoryA FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA TlsAlloc FindAtomW DeleteFileW UnregisterWaitEx LCMapStringW AreFileApisANSI GlobalUnlock FileTimeToDosDateTime CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue TlsFree SetLastError DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WideCharToMultiByte LCMapStringA GetModuleHandleA FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP

user32

GetMonitorInfoA

gdi32

GetCharWidthW

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

6c0f27024f875a94386862cfb5f0d2c8

kernel32

user32

gdi32

msimg32

generic