06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f

General

Target
06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f
Size 275KB
Sample240506-pkd4jsbe4v
SHA256 06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f
MD5 9eb9464649a3e10e8aad3ce2a8e6b4f6
SHA1 4d8237f97a2349039f817f69ad1b0f7a317e7ade
SHA512 bb7741c17431b75a048778d00078f18f8dc0f79a2ee2386bf57eabfe8b1058015abfdf45ff667955363f5f5afd1b6d7a6754ca13b48e731d4ddc6d69cf1b2355
SSDEEP 3072:y8l6MBAMDp/kgBbiftA+FGQhSW1mla9kRZp3mPjWIkjD8N/ICW1HnheyOhpyjWX3:y8zpWtAzGsf5maLD8NG16a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f

File Explorer

06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f

.exe 275KB

06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f

IMPHASH 97071217f05bf2e8bbd81955f4e3be85
SHA256 06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f
MD5 9eb9464649a3e10e8aad3ce2a8e6b4f6
SHA1 4d8237f97a2349039f817f69ad1b0f7a317e7ade
SHA512 bb7741c17431b75a048778d00078f18f8dc0f79a2ee2386bf57eabfe8b1058015abfdf45ff667955363f5f5afd1b6d7a6754ca13b48e731d4ddc6d69cf1b2355
SSDEEP 3072:y8l6MBAMDp/kgBbiftA+FGQhSW1mla9kRZp3mPjWIkjD8N/ICW1HnheyOhpyjWX3:y8zpWtAzGsf5maLD8NG16a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17202

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer SetComputerNameExA InterlockedIncrement InterlockedDecrement GetComputerNameW LockFile BackupSeek EnumTimeFormatsW SetCommState GlobalAlloc GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW GetConsoleAliasW GetACP GetConsoleOutputCP GetLastError SetLastError GetProcAddress SetComputerNameA BuildCommDCBW WriteConsoleA CreateHardLinkW CreateEventW RemoveDirectoryW AddAtomA GlobalUnWire GetModuleHandleA LoadLibraryExA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW WriteConsoleW SetEndOfFile

user32

GetCaretPos ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

06ca216667daf350f1b6e97e7205b0dafe3e0e27a57ce368fe998504e766791f

kernel32

user32

generic