bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d

General

Target
bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d
Size 245KB
Sample240511-1ph4vadd94
SHA256 bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d
MD5 a3eeff714d5bb923a7dcd61451c048f2
SHA1 e47e9597003a2c28ccccec610753641f55e70f3a
SHA512 e850661214d31b43bfca1b696cd866e1a14172d19e52e79d647e6c830eb0010d93cc22fd5791f061348aa965569f4ad8079563a425d20850eb4c2f62f0131954
SSDEEP 3072:Gk6Jst2BZBpRJY5YNtZ+Y1h67EAjE89sStQHCZ/FnwuQfPjpkyLTL6:Gksz4KPHJ8n9sStQiZBQz6UT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d

File Explorer

bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d

.exe 245KB

bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d

IMPHASH b05e972c4df51432a6d0cd2c78feeff4
SHA256 bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d
MD5 a3eeff714d5bb923a7dcd61451c048f2
SHA1 e47e9597003a2c28ccccec610753641f55e70f3a
SHA512 e850661214d31b43bfca1b696cd866e1a14172d19e52e79d647e6c830eb0010d93cc22fd5791f061348aa965569f4ad8079563a425d20850eb4c2f62f0131954
SSDEEP 3072:Gk6Jst2BZBpRJY5YNtZ+Y1h67EAjE89sStQHCZ/FnwuQfPjpkyLTL6:Gksz4KPHJ8n9sStQiZBQz6UT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer SetComputerNameExA LoadLibraryExW InterlockedDecrement SetCommBreak CreateHardLinkA LockFile GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA SetCommTimeouts GlobalAlloc GetSystemDirectoryW LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GetConsoleAliasW GlobalMemoryStatus InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA SetConsoleOutputCP AddAtomW GlobalFindAtomW GetOEMCP GetModuleHandleA BuildCommDCBA VirtualProtect GetTempPathA GetVolumeInformationW WriteConsoleW GetComputerNameA EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW CloseHandle SetEndOfFile

gdi32

GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

bb6be60a9c5ceeafe4132db6815312e1895b12cdf2bd076eb91f01fa0048c87d

kernel32

gdi32

generic