6f35cee990e7bfdd9d2bfb9bb9d3c55d

General

Target
6f35cee990e7bfdd9d2bfb9bb9d3c55d
Size 197KB
Sample240122-khm68acfg7
SHA256 a209282f0c6c5553d2a1e762340edc88c41d75863f39dab52ecdf6df6624e282
MD5 6f35cee990e7bfdd9d2bfb9bb9d3c55d
SHA1 050d55136ece531d37e621ece1e5c41b936fbd93
SHA512 cfa86f1ef849344d44dd90b351cfc470f4900f8065e21417c7e4112bd79bdea24215f27ab2b4a69d1501b4fecff365e0e2f73e2794bc623ad46b5d6c59d2a05b
SSDEEP 3072:kX5NdQdXYTdxreYj1CuVHw2R53KoZzScJQKtOgMRZafD4UA1b:kXRVTdVeYjh5Sq8bEcxb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f35cee990e7bfdd9d2bfb9bb9d3c55d

File Explorer

6f35cee990e7bfdd9d2bfb9bb9d3c55d

.exe 197KB

6f35cee990e7bfdd9d2bfb9bb9d3c55d

IMPHASH 3bdc58d7d3add14fdfc74404aa032a2d
SHA256 a209282f0c6c5553d2a1e762340edc88c41d75863f39dab52ecdf6df6624e282
MD5 6f35cee990e7bfdd9d2bfb9bb9d3c55d
SHA1 050d55136ece531d37e621ece1e5c41b936fbd93
SHA512 cfa86f1ef849344d44dd90b351cfc470f4900f8065e21417c7e4112bd79bdea24215f27ab2b4a69d1501b4fecff365e0e2f73e2794bc623ad46b5d6c59d2a05b
SSDEEP 3072:kX5NdQdXYTdxreYj1CuVHw2R53KoZzScJQKtOgMRZafD4UA1b:kXRVTdVeYjh5Sq8bEcxb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW GetSystemDefaultLCID GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA SetVolumeMountPointA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA lstrcpynW SetConsoleCursorPosition GetMailslotInfo ReadFile CreateTimerQueue GetTimeZoneInformation lstrcatA lstrlenW GetConsoleOutputCP InterlockedExchange FillConsoleOutputCharacterW GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW ResetEvent GetLocalTime LoadLibraryA WriteConsoleA LocalAlloc BuildCommDCBAndTimeoutsW SetFileApisToANSI GetOEMCP HeapSetInformation GetConsoleTitleW GetCPInfoExA ReleaseMutex FindFirstVolumeW DeleteTimerQueueTimer GetCurrentProcessId GetConsoleProcessList GetModuleFileNameW LocalUnlock CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

6f35cee990e7bfdd9d2bfb9bb9d3c55d

kernel32

user32

generic