6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5

Sharing

Copy URL Twitter E-mail

General

Target
6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5
Size 221KB
Sample240516-s68f3aca75
SHA256 6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5
MD5 505c4c3a2a8beb0f3fd8679041c03c65
SHA1 08b6604f8bd8c13f814203f87534032713dc3742
SHA512 2c6943c6263eb24e0789800b544d660de4d98bd5f230a9049411d689ff89a7aae5493f0d9bb44e1c62e8f7967dc09bf8319fd33ed0a05f67d966398b7b48773a
SSDEEP 3072:InRU7atvD4lp1S+NFq6BcQiFAYDPhD4Wtf7bic55+1YQblkGuDeKJwt5CF:IS6G4D4wKc/+GQqhDeew
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5

File Explorer

6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5

.exe 221KB

6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5

IMPHASH 6a21032514c5a6eb57fe18823be44730
SHA256 6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5
MD5 505c4c3a2a8beb0f3fd8679041c03c65
SHA1 08b6604f8bd8c13f814203f87534032713dc3742
SHA512 2c6943c6263eb24e0789800b544d660de4d98bd5f230a9049411d689ff89a7aae5493f0d9bb44e1c62e8f7967dc09bf8319fd33ed0a05f67d966398b7b48773a
SSDEEP 3072:InRU7atvD4lp1S+NFq6BcQiFAYDPhD4Wtf7bic55+1YQblkGuDeKJwt5CF:IS6G4D4wKc/+GQqhDeew
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA GetTickCount GetSystemDirectoryW WriteConsoleW SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress RemoveDirectoryA LoadLibraryA OpenMutexA SystemTimeToTzSpecificLocalTime LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA BuildCommDCBA VirtualProtect PurgeComm GetVolumeInformationW CloseHandle CreateFileW GetStringTypeW OutputDebugStringW WriteConsoleA GetComputerNameA GetConsoleCP FlushFileBuffers IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection ReadFile GetConsoleMode ReadConsoleW HeapFree SetFilePointerEx DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc SetStdHandle LCMapStringW SetEndOfFile

user32

SetCaretPos GetMenuItemID ChangeDisplaySettingsW

gdi32

GetCharWidthI

ole32

CoMarshalHresult

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

6f961dc6fc0c9faf25c715eaf3138ec9e12ecaf94fed04b44f53cf39251809e5

kernel32

user32

gdi32

ole32

msimg32

generic