2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b

General

Target
2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
Size 204KB
Sample240520-3p9mxabc93
SHA256 2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
MD5 3c85a563d1783ae7e37da0d68e2fc834
SHA1 c4afd3247a9bf9386815099bfee5ffc0bd2376db
SHA512 7ac0b26b73440593bf1ff299541f086798e4768410f42cfa404ec2c267ce5d3fd05cb9462c66a50a99095544e427c59abd45afa4fd18113da6e8cb93f826a8de
SSDEEP 3072:YkBkW8LXXrWkZv+Zs6NZdMGcKR8ifY13t1u4HZIfA3WKTLYS:YFjLXy00zGKRffY1dUIZT3WkY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b

File Explorer

2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b

.exe 204KB

2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b

IMPHASH be6912d7f98e28f6fe62d68348833ccb
SHA256 2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b
MD5 3c85a563d1783ae7e37da0d68e2fc834
SHA1 c4afd3247a9bf9386815099bfee5ffc0bd2376db
SHA512 7ac0b26b73440593bf1ff299541f086798e4768410f42cfa404ec2c267ce5d3fd05cb9462c66a50a99095544e427c59abd45afa4fd18113da6e8cb93f826a8de
SSDEEP 3072:YkBkW8LXXrWkZv+Zs6NZdMGcKR8ifY13t1u4HZIfA3WKTLYS:YFjLXy00zGKRffY1dUIZT3WkY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14531

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateEventA WriteConsoleW IsBadStringPtrA GetLastError SetLastError GetProcAddress RemoveDirectoryA LoadLibraryA GetVolumeInformationA LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA GetCommTimeouts BuildCommDCBA VirtualProtect SetFileAttributesW GetSystemDirectoryW GetConsoleAliasA GetTickCount WriteConsoleA SetComputerNameExA EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent HeapAlloc IsDebuggerPresent ReadFile HeapSize HeapFree GetProcessHeap EnterCriticalSection LeaveCriticalSection CloseHandle DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetFilePointerEx GetConsoleMode LCMapStringW SetStdHandle FlushFileBuffers GetConsoleCP OutputDebugStringW GetStringTypeW CreateFileW

gdi32

GetBoundsRect GetCharWidthI

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

2606d55a4fd378fd345252c65a0dab3ea28ae80017a3321646c01a15a78b060b

kernel32

gdi32

advapi32

generic