6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec

General

Target
6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec
Size 244KB
Sample240226-ccw8yaaa86
SHA256 6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec
MD5 6ecc93082ed0087fd90c9c6caf4bd6f7
SHA1 70066115cb7f419f30952be2e2decac86ba77e4c
SHA512 1f34ceb990d088df3a668da23d03e962b6046b7fa130fdcce9761ba76486abe9b4bc19d73492316e5c640736e47f69ebbe8a5ef6fcd85447454c9836d5370c18
SSDEEP 3072:6xJR/YrRmLtCvkW9ZFj1ybsN5xjbmxMFqPfSUXMU5opi7:uJ9wmLIvZyePjyqqPfK0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec

File Explorer

6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec

.exe 244KB

6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec

IMPHASH 4d84adbb2e02d398fb59447e22f40d90
SHA256 6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec
MD5 6ecc93082ed0087fd90c9c6caf4bd6f7
SHA1 70066115cb7f419f30952be2e2decac86ba77e4c
SHA512 1f34ceb990d088df3a668da23d03e962b6046b7fa130fdcce9761ba76486abe9b4bc19d73492316e5c640736e47f69ebbe8a5ef6fcd85447454c9836d5370c18
SSDEEP 3072:6xJR/YrRmLtCvkW9ZFj1ybsN5xjbmxMFqPfSUXMU5opi7:uJ9wmLIvZyePjyqqPfK0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8876

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\karatujusipiz\habukita\saf\ku.pdb

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement ReadConsoleA GetConsoleAliasA InterlockedDecrement GetComputerNameW GetFileAttributesExA GetTickCount GenerateConsoleCtrlEvent GetConsoleTitleA CreateRemoteThread GetConsoleAliasExesW CreateDirectoryExW GlobalAlloc GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA FindNextVolumeMountPointW GetLastError SetLastError GetProcAddress VirtualAlloc SetStdHandle SetComputerNameA GetTempFileNameA LoadLibraryA InterlockedExchangeAdd SetCalendarInfoW GetNumberFormatW RemoveDirectoryW QueryDosDeviceW DeviceIoControl GetModuleHandleA GetCurrentProcessId AddConsoleAliasA GetVolumeInformationW CloseHandle GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA

user32

CharUpperBuffA LoadKeyboardLayoutA RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

6fb44872293183a00b9acdcaf2cee313523611ecf449ecea6f2a198c87ca01ec

kernel32

user32

generic