6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d[.]exe

General

Target
6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d.exe
Size 307KB
Sample240601-x97fdsde43
SHA256 6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d
MD5 747395a7777c19c8b665ec6bb586ff3a
SHA1 13f4e9d3354c4e9d3a681b37d37286e171fdc65b
SHA512 804d1771277c282f7c8f07ef6c41def4bc63ae20e35bbbd338bf3d1e5d8a31e8b62c84a7bcc966cea662858c40609553150557689c9fa84ce0e70b5c92ca30f5
SSDEEP 3072:UjG7OjhVQ/OISTdP8Ztd5rG3eVATxyFPBuflzqhLkgbe+3mILcqJs5rdKGdKth:UEOjcVMR8Ztdlw+PB08zbTWInQK6Kth
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d.exe

File Explorer

6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d.exe

.exe 307KB

6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d.exe

IMPHASH 3a582865c782b33b9d8f1f43c5ada28c
SHA256 6a41f4693bf480f6b8957759f250b4ff8cff871b0c36e4b8fb6d00e378e38a4d
MD5 747395a7777c19c8b665ec6bb586ff3a
SHA1 13f4e9d3354c4e9d3a681b37d37286e171fdc65b
SHA512 804d1771277c282f7c8f07ef6c41def4bc63ae20e35bbbd338bf3d1e5d8a31e8b62c84a7bcc966cea662858c40609553150557689c9fa84ce0e70b5c92ca30f5
SSDEEP 3072:UjG7OjhVQ/OISTdP8Ztd5rG3eVATxyFPBuflzqhLkgbe+3mILcqJs5rdKGdKth:UEOjcVMR8Ztdlw+PB08zbTWInQK6Kth
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4631

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTimeFormatA GetModuleHandleW EnumTimeFormatsW ActivateActCtx ReadFileScatter WriteConsoleOutputA InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetConsoleAliasW GetModuleFileNameW SetConsoleTitleA GetShortPathNameA GetComputerNameW SetLastError GetProcAddress GetLongPathNameA GetProcessHeaps LocalLock LoadLibraryA UnhandledExceptionFilter FreeEnvironmentStringsW BuildCommDCBA CompareStringA GetFileInformationByHandle LocalFileTimeToFileTime TryEnterCriticalSection InterlockedDecrement GetConsoleAliasesW GlobalDeleteAtom GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

gdi32

GetCharWidth32W

advapi32

OpenThreadToken

winhttp

WinHttpReadData

Sharing