6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b

General

Target
6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b
Size 773KB
Sample240507-223vfsdb2x
SHA256 6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b
MD5 6d59b0fdf7f7b72f5e1d38276aea3afc
SHA1 202ec8a2c5523797c06f50562bfdcd5e7394aec5
SHA512 454943538f7d92a23e9a265e458b97ea277cae2590b0ecb7669eaee3e403c8734ff1c06cc286c89bc727548f5d2bb9ee2a107aedeedc6a741b4212a850469c8a
SSDEEP 12288:KlZlK/mrQmWIETVcCIrRWW6bDFpaFWP4qXDAEu0GXlDLA0EPBAk6MRtykGk:yyIETCVWWqRM7ukP9LLEPBGMRtyTk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b

File Explorer

6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b

.exe 773KB

6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b

IMPHASH d4e235ce871ad26a687da89d3c34041b
SHA256 6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b
MD5 6d59b0fdf7f7b72f5e1d38276aea3afc
SHA1 202ec8a2c5523797c06f50562bfdcd5e7394aec5
SHA512 454943538f7d92a23e9a265e458b97ea277cae2590b0ecb7669eaee3e403c8734ff1c06cc286c89bc727548f5d2bb9ee2a107aedeedc6a741b4212a850469c8a
SSDEEP 12288:KlZlK/mrQmWIETVcCIrRWW6bDFpaFWP4qXDAEu0GXlDLA0EPBAk6MRtykGk:yyIETCVWWqRM7ukP9LLEPBGMRtyTk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer InterlockedIncrement InterlockedDecrement GetComputerNameW LockFile BackupSeek EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetLastError SetLastError GetProcAddress SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW RemoveDirectoryW GlobalUnWire GetModuleHandleA LoadLibraryExA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetCaretPos ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

6d8e3926431714aa890fa00135a009505c2699167f8cf24554bb9cffe4060e3b

kernel32

user32

generic