c61febcfcba5472d44faaee9c3ff6274

General

Target
c61febcfcba5472d44faaee9c3ff6274
Size 268KB
Sample240313-ryggyahb46
SHA256 59a610e1a5d445eed446facf5cb57ba77792583a70c4b1d4cb9f09dfe752dd63
MD5 c61febcfcba5472d44faaee9c3ff6274
SHA1 4903a04ea3b401608bd24af1c38ff9ecb5dd2471
SHA512 7cbd340cf95eb70853bb63c7dc40853c67d4baac9677a5fb1d2556cbc7ac076efe551959ca536574da9ed1d07da6af007f15175d071d54fae0d95e0c3ad66c1d
SSDEEP 6144:y2Zgin4kXSd1buZyCsRUeoEK3T0+c4CN0YvCLxUOFHhO2C:ywHQ1KZM6eo3T0B9al62
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c61febcfcba5472d44faaee9c3ff6274

File Explorer

c61febcfcba5472d44faaee9c3ff6274

.exe 268KB

c61febcfcba5472d44faaee9c3ff6274

IMPHASH 76d8e0e5e12cac7cc9dabe529277d95d
SHA256 59a610e1a5d445eed446facf5cb57ba77792583a70c4b1d4cb9f09dfe752dd63
MD5 c61febcfcba5472d44faaee9c3ff6274
SHA1 4903a04ea3b401608bd24af1c38ff9ecb5dd2471
SHA512 7cbd340cf95eb70853bb63c7dc40853c67d4baac9677a5fb1d2556cbc7ac076efe551959ca536574da9ed1d07da6af007f15175d071d54fae0d95e0c3ad66c1d
SSDEEP 6144:y2Zgin4kXSd1buZyCsRUeoEK3T0+c4CN0YvCLxUOFHhO2C:ywHQ1KZM6eo3T0B9al62
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20923

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LCMapStringA GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GetEnvironmentStrings LCMapStringW FreeEnvironmentStringsA GetModuleFileNameA UnhandledExceptionFilter TerminateProcess WriteFile SetStdHandle FlushFileBuffers SetFilePointer CreateFileW GetCPInfo GetACP GetOEMCP GetProcAddress GetStringTypeA GetStringTypeW SetEndOfFile MulDiv GetCurrentProcess MultiByteToWideChar GetProcessTimes FileTimeToLocalFileTime FileTimeToSystemTime LoadLibraryA lstrlenA FindResourceA SizeofResource LoadResource LockResource FreeResource VirtualProtect WideCharToMultiByte FreeEnvironmentStringsW HeapAlloc RtlUnwind HeapReAlloc HeapFree GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr GetLastError CloseHandle ReadFile

user32

CreatePopupMenu AppendMenuA TrackPopupMenuEx DestroyMenu CreateWindowExA ShowWindow IsWindowEnabled MoveWindow DestroyWindow GetCursorPos WindowFromPoint GetWindowDC SetRect GetSysColorBrush FillRect SetWindowRgn GetDC GetWindowRect SetCursorPos GetSystemMenu GetMenuItemCount RemoveMenu DrawMenuBar

gdi32

CreateDIBSection BitBlt GetDIBits SetDIBitsToDevice GetTextExtentPoint32A ExtTextOutA CreateCompatibleDC CreateCompatibleBitmap SelectObject TextOutA CreateEllipticRgn GetDeviceCaps CreateFontA Polygon GetStockObject CreatePolygonRgn FillRgn DeleteObject DeleteDC

advapi32

OpenEventLogA ClearEventLogA ReportEventA GetNumberOfEventLogRecords GetOldestEventLogRecord BackupEventLogA CloseEventLog

Sharing

General

Malware Config

Signatures

File Explorer

c61febcfcba5472d44faaee9c3ff6274

kernel32

user32

gdi32

advapi32

generic