a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329

General

Target
a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329
Size 435KB
Sample240617-fsx2yszdml
SHA256 a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329
MD5 9e49e965497860a4ea1e4065afad6304
SHA1 aff9631611d09814d7acd75b3ee18b50ea074e2d
SHA512 bdd24dee78518ae709e061ac6f7761f76e59c0013876b5076c2648e6f531f253e5d507dd2629352bd4dd8fad8bacbd4458576a6f451f87ab4db203f97605e06f
SSDEEP 6144:0S1gnkIzWbaEBCS2Ra43A2khln30krfESFDhORgYzUQMnlw9NPNDL5NXPMPvnT2Y:0IgnkIzcRYkrfDXCgYwnlwD1fMPvyaH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329

File Explorer

a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329

.exe 435KB

a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329

IMPHASH 27806f51eed9e189335a59585444b2ec
SHA256 a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329
MD5 9e49e965497860a4ea1e4065afad6304
SHA1 aff9631611d09814d7acd75b3ee18b50ea074e2d
SHA512 bdd24dee78518ae709e061ac6f7761f76e59c0013876b5076c2648e6f531f253e5d507dd2629352bd4dd8fad8bacbd4458576a6f451f87ab4db203f97605e06f
SSDEEP 6144:0S1gnkIzWbaEBCS2Ra43A2khln30krfESFDhORgYzUQMnlw9NPNDL5NXPMPvnT2Y:0IgnkIzcRYkrfDXCgYwnlwD1fMPvyaH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

38142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

SetPixel

user32

SetWindowLongA GetWindowRect ReleaseDC GetDC GetMessageA ShowWindow CreateWindowExW DispatchMessageA TranslateMessage UpdateWindow

kernel32

WriteConsoleW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW CloseHandle WaitForSingleObject CreateThread VirtualAlloc GetModuleHandleA GetConsoleWindow GetCurrentThreadId WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess FindFirstFileExW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetConsoleCP GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW CreateFileW SetConsoleMode ReadConsoleInputW HeapReAlloc FindClose SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

a6aa41c4146d958de74395c388ef2af7cc1b47c381c8d4661130d510143e7329

gdi32

user32

kernel32

generic