6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3

General

Target
6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3
Size 431KB
Sample240619-p6bkjs1arg
SHA256 6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3
MD5 a6bdb6099bbb8aace2d92cf8d46b7524
SHA1 3972e9f9644e7c7c45e77fff475648a1c1142e8e
SHA512 8d76509edc7d39db5ae49fb57ff62c5e691273f6458f0334961b04dd43efdbc629cb4a8324b4bdfb08c9056be8202783fc1bdb9edccefcca24faa4ec250397ea
SSDEEP 12288:Sovw3SZE/jXTdDBWMmN+3ptf0Fp3Txp7H:oSZE7XtAzA3ptcrNpb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3

File Explorer

6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3

.exe 431KB

6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3

IMPHASH 019a1de5e7f5ffb60a4f12c17d546386
SHA256 6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3
MD5 a6bdb6099bbb8aace2d92cf8d46b7524
SHA1 3972e9f9644e7c7c45e77fff475648a1c1142e8e
SHA512 8d76509edc7d39db5ae49fb57ff62c5e691273f6458f0334961b04dd43efdbc629cb4a8324b4bdfb08c9056be8202783fc1bdb9edccefcca24faa4ec250397ea
SSDEEP 12288:Sovw3SZE/jXTdDBWMmN+3ptf0Fp3Txp7H:oSZE7XtAzA3ptcrNpb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FindResourceA GlobalCompact GetCPInfo FindResourceW GetConsoleAliasA CreateHardLinkA OutputDebugStringW GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalAlloc GlobalFindAtomA LoadLibraryW IsBadStringPtrA OpenMutexW GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA InterlockedExchangeAdd FindFirstVolumeMountPointW GetDiskFreeSpaceA EnumResourceTypesW LoadLibraryExA lstrcatW BuildCommDCBA TerminateJobObject GetWindowsDirectoryW OpenFileMappingA WriteProcessMemory CreateFileW WriteConsoleW HeapFree GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW HeapCreate HeapAlloc SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle RtlUnwind WideCharToMultiByte GetACP GetOEMCP IsValidCodePage HeapSize RaiseException HeapReAlloc IsProcessorFeaturePresent GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW CloseHandle

user32

GetKeyboardLayoutNameW DdeCmpStringHandles GetCaretPos GetWindowTextLengthA

Sharing

General

Malware Config

Signatures

File Explorer

6e44ab603c1f25f14c84f2bfcad3d0df5fec8398dbbab5dc324e13c234126bd3

kernel32

user32

generic