611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe

General

Target
611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe
Size 825KB
Sample240418-2ma6wsgh84
SHA256 611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe
MD5 58abe55a31e14c31899d613b8352aa8b
SHA1 746f90892894e17dc83c2331e1dd4c9da0483b2f
SHA512 e5c47096e6797ba15a7094cdd138ddf7987a9ba7a3f908deb2e584a3934a422ea966de49fcaab853ac49030113f3cb03990801f9025eb1492822550d338672a1
SSDEEP 12288:V6aTUI6c4iaqhshaglJCiv6vrGDpvYub+wo32D3U2znHhy9MRq9CKT7wh50KBmr/:ZB6ccOg/7CzXuCz3KlH4MRkz7s51mca
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe

File Explorer

611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe

.exe 825KB

611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe

IMPHASH d0eb7b8c702cd1b9d76bcc539912ddcb
SHA256 611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe
MD5 58abe55a31e14c31899d613b8352aa8b
SHA1 746f90892894e17dc83c2331e1dd4c9da0483b2f
SHA512 e5c47096e6797ba15a7094cdd138ddf7987a9ba7a3f908deb2e584a3934a422ea966de49fcaab853ac49030113f3cb03990801f9025eb1492822550d338672a1
SSDEEP 12288:V6aTUI6c4iaqhshaglJCiv6vrGDpvYub+wo32D3U2znHhy9MRq9CKT7wh50KBmr/:ZB6ccOg/7CzXuCz3KlH4MRkz7s51mca
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6447

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA EnumCalendarInfoA GetConsoleAliasesLengthW VirtualQuery GetCommState HeapFree GetComputerNameW UnlockFile WaitForSingleObjectEx GetModuleHandleW GetDateFormatA EnumTimeFormatsW GlobalAlloc LoadLibraryW IsValidLocale GetLocaleInfoW IsBadWritePtr GetAtomNameW FindNextVolumeMountPointW SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress GetProcessHeaps BuildCommDCBW LoadLibraryA SetCalendarInfoW GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect FileTimeToLocalFileTime HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

LoadIconW

Sharing

General

Malware Config

Signatures

File Explorer

611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe

kernel32

user32

generic