6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671

General

Target
6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671
Size 382KB
Sample240528-wb8ecsfa22
SHA256 6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671
MD5 b2dabc8461031934a6524df2e7bce27f
SHA1 b6fcedbd1f884d23fe1f0367e653821df56fd55a
SHA512 b910cb887744594e722f835d48671d0ca549b450a47713764a7b2bc699c38b1d6a114f49bba7f467312a611e0561c991a0b45a26aa76a470e8a473ef840415c8
SSDEEP 6144:uoTbNLzTArkioOifFRpCn4zFkG+bL5/GyhAZTb+els:uoTbNjAr5oOiD44zFHKRaZx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671

File Explorer

6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671

.exe 382KB

6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671

IMPHASH df3a1d2939e1b347e5da8c3bb01fd501
SHA256 6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671
MD5 b2dabc8461031934a6524df2e7bce27f
SHA1 b6fcedbd1f884d23fe1f0367e653821df56fd55a
SHA512 b910cb887744594e722f835d48671d0ca549b450a47713764a7b2bc699c38b1d6a114f49bba7f467312a611e0561c991a0b45a26aa76a470e8a473ef840415c8
SSDEEP 6144:uoTbNLzTArkioOifFRpCn4zFkG+bL5/GyhAZTb+els:uoTbNjAr5oOiD44zFHKRaZx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16135

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalAlloc GetLastError SetLastError ReadProcessMemory GetTickCount _lopen OpenEventA LoadLibraryW LoadLibraryExW GetModuleFileNameW GetModuleHandleW GetSystemDirectoryW CreateDirectoryA SetFileAttributesW GetVolumeInformationA IsBadStringPtrA GetProcAddress CommConfigDialogA SetComputerNameExA SetInformationJobObject FindNextVolumeA FindFirstVolumeMountPointW SetVolumeMountPointW GetOEMCP GetLocaleInfoA GetNumberFormatA GetStringTypeW SetConsoleCursorInfo AllocConsole AddConsoleAliasW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle BuildCommDCBA InterlockedExchange EncodePointer DecodePointer RaiseException RtlUnwind GetCommandLineW IsProcessorFeaturePresent HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsDebuggerPresent LCMapStringW EnterCriticalSection LeaveCriticalSection IsValidCodePage GetACP GetCPInfo HeapReAlloc OutputDebugStringW FlushFileBuffers GetConsoleCP GetConsoleMode CreateFileW

user32

GetSysColorBrush SetMenu DdeKeepStringHandle

gdi32

GetCharWidthA

Sharing

General

Malware Config

Signatures

File Explorer

6a94ccad971931a56537e61f3b7fb6c0f65069b729861e2575b90e5ceea87671

kernel32

user32

gdi32

generic