6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14

General

Target
6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14
Size 311KB
Sample240524-ahsrlaee37
SHA256 6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14
MD5 c70921913e604adc8043661bb73c7b72
SHA1 f5df13162e08ab6b3cf2e008194fa2df0ac19a72
SHA512 f7565cd8be91fe94d42e4797835ce2dcb1d9d6c3674c87c83430572dec6a840380162bde576cf00502994b01c0e1c7f061266ea212677b9e46ecc0f2f8649b94
SSDEEP 6144:HS8IKrBBJxT840zJNKLQ+HcTgCEucxwi:y8IKrDJxT840WH8MX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14

File Explorer

6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14

.exe 311KB

6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14

IMPHASH 5cf08a4aff927374d8bb5dde9b8dc613
SHA256 6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14
MD5 c70921913e604adc8043661bb73c7b72
SHA1 f5df13162e08ab6b3cf2e008194fa2df0ac19a72
SHA512 f7565cd8be91fe94d42e4797835ce2dcb1d9d6c3674c87c83430572dec6a840380162bde576cf00502994b01c0e1c7f061266ea212677b9e46ecc0f2f8649b94
SSDEEP 6144:HS8IKrBBJxT840zJNKLQ+HcTgCEucxwi:y8IKrDJxT840WH8MX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5347

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA CommConfigDialogA InterlockedIncrement SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer FindFirstFileExW SetCommBreak GetModuleHandleW GetTickCount GetProcessHeap GetPriorityClass Sleep GetFileAttributesA WriteConsoleW CompareStringW SetConsoleTitleA GetConsoleAliasesW SetLastError GetProcAddress GetLongPathNameA LoadLibraryA SetCurrentDirectoryW VirtualLock GlobalGetAtomNameW OpenJobObjectW FindAtomA SetSystemTime EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA AreFileApisANSI GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

6f3efc29500757e54afc7c925f0300f8cdb0d7eeac075d2cc46c94bbc4214f14

kernel32

user32

generic