c6948d373652315b6c88e483b46700c8

General

Target
c6948d373652315b6c88e483b46700c8
Size 474KB
Sample240313-w51avaec89
SHA256 22d1e6ea20d6a47970b1b9d3ddb584f7c3c581cedf92f8171c105d6a8e2a6be4
MD5 c6948d373652315b6c88e483b46700c8
SHA1 acb490827d0c19d64b05902c13dc67a51c1566cc
SHA512 6b1786333cdc1c10419779bdd67eee56dda5bf2af6f1dabc7de6a8a90f093401f9d15efefa3e0738d4af7c2e266c59488ff8650eb21ef81fe4e7b06e0fc8736e
SSDEEP 12288:YWNfV+24oZiL5woCqXY3rp3savpzy2P9YuhJOiiFi:1JVGoZiLqhgY7p33FauYFi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6948d373652315b6c88e483b46700c8

File Explorer

c6948d373652315b6c88e483b46700c8

.exe 474KB

c6948d373652315b6c88e483b46700c8

IMPHASH b09961d8006e7ff4bbe247dfce906b36
SHA256 22d1e6ea20d6a47970b1b9d3ddb584f7c3c581cedf92f8171c105d6a8e2a6be4
MD5 c6948d373652315b6c88e483b46700c8
SHA1 acb490827d0c19d64b05902c13dc67a51c1566cc
SHA512 6b1786333cdc1c10419779bdd67eee56dda5bf2af6f1dabc7de6a8a90f093401f9d15efefa3e0738d4af7c2e266c59488ff8650eb21ef81fe4e7b06e0fc8736e
SSDEEP 12288:YWNfV+24oZiL5woCqXY3rp3savpzy2P9YuhJOiiFi:1JVGoZiLqhgY7p33FauYFi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gapuha-yerimogulih\yabeya sazosazi1.pdb

kernel32

lstrlenA EnumDateFormatsExW MoveFileExA EndUpdateResourceW InterlockedIncrement InterlockedDecrement ReadConsoleOutputAttribute GetSystemWindowsDirectoryW GetEnvironmentStringsW GetUserDefaultLCID WaitForSingleObject SetConsoleScreenBufferSize GetComputerNameW SetEvent GetConsoleAliasesLengthA CreateActCtxW GetConsoleCP LocalShrink ReadConsoleOutputW GetVersionExW GetFileAttributesA lstrcpynW GetConsoleAliasW VerifyVersionInfoA WriteConsoleW WritePrivateProfileSectionW IsBadWritePtr ReadFile GetModuleFileNameW GetCompressedFileSizeA CreateFileW lstrcatA GetACP GetVolumePathNameA SetConsoleTitleA VerifyVersionInfoW InterlockedExchange GetLastError GetProcAddress EnterCriticalSection GetLocalTime GetProcessId LocalAlloc SetCalendarInfoW DnsHostnameToComputerNameA CreateTapePartition SetConsoleDisplayMode SetFileApisToANSI GlobalGetAtomNameW SetEnvironmentVariableA GetModuleHandleA UpdateResourceW CancelTimerQueueTimer GetConsoleTitleW BuildCommDCBA VirtualProtect PeekConsoleInputA FindFirstVolumeW GetSystemDirectoryA GetSystemDefaultLangID GetStartupInfoW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess IsDebuggerPresent LeaveCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA WideCharToMultiByte LCMapStringW HeapSize

user32

RealGetWindowClassW

Sharing

General

Malware Config

Signatures

File Explorer

c6948d373652315b6c88e483b46700c8

kernel32

user32

generic