6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5

Resubmissions

11/04/2024, 07:29

240411-jbfccsef6210

11/04/2024, 07:28

11/04/2024, 07:28

11/04/2024, 07:28

11/04/2024, 07:28

07/04/2024, 09:04

07/04/2024, 09:04

07/04/2024, 09:03

07/04/2024, 09:03

18/12/2023, 04:55

Sharing

Copy URL Twitter E-mail

General

Target
6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5
Size 1.9MB
Sample240411-jav2esef45
SHA256 6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5
MD5 001f6aefa850c575018eaa792a0ebbc5
SHA1 69a44211fda244815a6f7b4480dada97f7778fe0
SHA512 24eeb6d51b6d3d2988e4eb39a0c0580013d7a3a1711d0d512a233c5a5ca1f5bb4d28b3e39e0e18990d83f592c3550e13cb905b7573c013155867b7221b9997d5
SSDEEP 24576:Z0ZIVjFxbxJMgQ5DIiJ1KxwflAbWgj8RuFwTXJsK63Ct6ij0V+uYzjy2QhL8Gbge:CC9pagQFIE1KbkYF+X70V+hy7hAI1U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5

File Explorer

6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5

.exe 1.9MB

6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5

IMPHASH a78e7a6400453cb536eea876b9168fc0
SHA256 6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5
MD5 001f6aefa850c575018eaa792a0ebbc5
SHA1 69a44211fda244815a6f7b4480dada97f7778fe0
SHA512 24eeb6d51b6d3d2988e4eb39a0c0580013d7a3a1711d0d512a233c5a5ca1f5bb4d28b3e39e0e18990d83f592c3550e13cb905b7573c013155867b7221b9997d5
SSDEEP 24576:Z0ZIVjFxbxJMgQ5DIiJ1KxwflAbWgj8RuFwTXJsK63Ct6ij0V+uYzjy2QhL8Gbge:CC9pagQFIE1KbkYF+X70V+hy7hAI1U
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43401

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA PeekNamedPipe ConvertThreadToFiber InterlockedIncrement InterlockedDecrement GetNamedPipeHandleStateA GetEnvironmentStringsW WriteConsoleInputA SetVolumeMountPointW GetModuleHandleW LocalFlags ReadConsoleW GetWindowsDirectoryA GlobalAlloc LoadLibraryW GetLocaleInfoW GetVersionExW GetConsoleAliasW WriteConsoleW WritePrivateProfileSectionW ReadFile GetCompressedFileSizeA GetStartupInfoW VirtualUnlock FindFirstFileA GetCPInfoExW GetLastError SetLastError GetProcAddress HeapSize IsValidCodePage OpenWaitableTimerA WriteConsoleA LocalAlloc FindFirstVolumeMountPointW UpdateResourceW FindNextFileW GetCurrentDirectoryA WaitForDebugEvent GetVolumeNameForVolumeMountPointW GlobalAddAtomW GetProfileSectionW CommConfigDialogW CreateFileW FlushFileBuffers SetStdHandle GetConsoleMode GetCommandLineW LocalUnlock GetShortPathNameA DebugActiveProcess GetConsoleCP SetFilePointer WideCharToMultiByte InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree DeleteFileA HeapReAlloc GetCommandLineA HeapSetInformation GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetACP GetOEMCP TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CloseHandle

user32

CharToOemBuffA CharUpperBuffW GetDlgCtrlID

gdi32

GetCharWidthW

advapi32

DuplicateToken

winhttp

WinHttpCloseHandle

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

6ffdead52c68fdafb9fb7e5f0b2e4fc806e56f1a3126bad04194cba602dd92c5

kernel32

user32

gdi32

advapi32

winhttp

generic