6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13

General

Target
6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13
Size 387KB
Sample240511-apbfwsad8w
SHA256 6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13
MD5 5fdf9311309c4d0ccfd96f81cc423221
SHA1 552b94b6bd496a9ed2ce32957b51c20972e22211
SHA512 3bc70e7a5e2cfc18ab687ae607af853f46dee55bd4101198e2c508386e4d4fa6a34a55a6650e3507e7e697aea49c421b2fbb0a487d09df79db52ba20adf88cce
SSDEEP 6144:JzP+6ZWEAS2YtQTTtNLiamb2gWwfGtUyeWPwj7Z9o4T9o4:JzP+6sjS3EjLKbdGtqfjC4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13

File Explorer

6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13

.exe 387KB

6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13

IMPHASH caa05f44f7576e372159bec163f68edb
SHA256 6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13
MD5 5fdf9311309c4d0ccfd96f81cc423221
SHA1 552b94b6bd496a9ed2ce32957b51c20972e22211
SHA512 3bc70e7a5e2cfc18ab687ae607af853f46dee55bd4101198e2c508386e4d4fa6a34a55a6650e3507e7e697aea49c421b2fbb0a487d09df79db52ba20adf88cce
SSDEEP 6144:JzP+6ZWEAS2YtQTTtNLiamb2gWwfGtUyeWPwj7Z9o4T9o4:JzP+6sjS3EjLKbdGtqfjC4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer SetComputerNameExA LoadLibraryExW InterlockedDecrement SetComputerNameW SetCommBreak CreateHardLinkA LockFile GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetSystemDirectoryW GetVolumeInformationA LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GlobalMemoryStatus InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA SetConsoleOutputCP AddAtomA GlobalFindAtomW GetOEMCP GetModuleHandleA BuildCommDCBA VirtualProtect GetTempPathA SetFileAttributesW GetConsoleAliasW GetComputerNameA EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW CloseHandle WriteConsoleW SetEndOfFile

gdi32

GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

6d55ceb63d5c42b83b950810b2d32965ffe698af5ffc84f695ee16ac29e4ff13

kernel32

gdi32

generic