a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84

General

Target
a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84
Size 222KB
Sample240125-teh8jaabd5
SHA256 a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84
MD5 74c7fa512488e92f2cf00abdce92c1b8
SHA1 1727b635745d05ae6e272b7af3e91cab491e5a97
SHA512 44f5e961d1ce94f24f69060aac50a3bcb071e52267d6c678e094f72f9225be12eb72b1cdd884260f81636639cc711436304d4dbd0d75d551564856c8aa84406f
SSDEEP 3072:i1iyRWiGqAc6L8p1dcUFwS++CfS+dbqDohZEzyCqdI:i1ial6L85FV/JdDomZm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84

File Explorer

a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84

.dll 222KB

a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84

IMPHASH 8dc206e28b85772db281e0eaf5953a30
SHA256 a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84
MD5 74c7fa512488e92f2cf00abdce92c1b8
SHA1 1727b635745d05ae6e272b7af3e91cab491e5a97
SHA512 44f5e961d1ce94f24f69060aac50a3bcb071e52267d6c678e094f72f9225be12eb72b1cdd884260f81636639cc711436304d4dbd0d75d551564856c8aa84406f
SSDEEP 3072:i1iyRWiGqAc6L8p1dcUFwS++CfS+dbqDohZEzyCqdI:i1ial6L85FV/JdDomZm
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

64821

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleHandleExA FreeLibrary GetModuleFileNameA GetSystemTimeAsFileTime FileTimeToSystemTime GetTimeZoneInformation GetProcAddress LoadLibraryA InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection MultiByteToWideChar WaitForSingleObject CloseHandle Sleep InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InitializeCriticalSectionEx WideCharToMultiByte GetLocaleInfoEx GetStringTypeW GetLastError HeapFree CreateThread GetCurrentThreadId ExitThread LoadLibraryExW HeapAlloc HeapReAlloc GetCommandLineA RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent IsDebuggerPresent ExitProcess GetModuleHandleExW AreFileApisANSI HeapSize GetStdHandle WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP SetLastError GetFileType InitOnceExecuteOnce GetStartupInfoW GetProcessHeap ReadFile SetFilePointerEx FlushFileBuffers GetConsoleCP GetConsoleMode UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW QueryPerformanceCounter GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW SetFilePointer GetUserDefaultLocaleName LCMapStringEx IsValidLocaleName EnumSystemLocalesEx OutputDebugStringW LoadLibraryW ReadConsoleW SetStdHandle WriteConsoleW CreateFileW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

a6c551fe1a3c8d2b12d779a0146b1355a5bdd940aa7ae588bfb8fac397816b84

kernel32

generic