66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995

Sharing

Copy URL Twitter E-mail

General

Target
66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995
Size 397KB
Sample240625-psltcstamj
SHA256 66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995
MD5 602907b6bbc66db579d17d88db9728c1
SHA1 bc9822967e2a5234ffea89b772e8f232c7a18f0c
SHA512 797096d16b7d5dff8e84c5e5798ec183c196e3dac470a98f245a7303d506419c94d546df0aa5bd4fc4b9387d654e7a5e4c189cdd04d318bfc8ce735935652efd
SSDEEP 6144:hSL8Jw2IGg2g16DA5z4DQgSuE9Z86aKFNH:kgJPINz16D5kgS7/N
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995

File Explorer

66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995

.exe 397KB

66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995

IMPHASH 3fbbd2814932cb3d994a2a2b0332e421
SHA256 66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995
MD5 602907b6bbc66db579d17d88db9728c1
SHA1 bc9822967e2a5234ffea89b772e8f232c7a18f0c
SHA512 797096d16b7d5dff8e84c5e5798ec183c196e3dac470a98f245a7303d506419c94d546df0aa5bd4fc4b9387d654e7a5e4c189cdd04d318bfc8ce735935652efd
SSDEEP 6144:hSL8Jw2IGg2g16DA5z4DQgSuE9Z86aKFNH:kgJPINz16D5kgS7/N
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultLCID GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW ReadConsoleOutputA GlobalAlloc LoadLibraryW SetVolumeMountPointA GetConsoleAliasExesLengthW lstrcpynW LocalReAlloc WriteConsoleW GetModuleFileNameW GetConsoleAliasesW InterlockedExchange CreateJobObjectW GetProcAddress LoadLibraryA UnhandledExceptionFilter AddAtomA OpenJobObjectW FoldStringW GetCommTimeouts lstrcatW OpenFileMappingW GetConsoleTitleW BuildCommDCBA FindFirstVolumeW GlobalAddAtomW AreFileApisANSI GetNumaProcessorNode OpenJobObjectA GetLastError GetComputerNameA CloseHandle HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile CreateFileA

user32

LoadIconA

gdi32

GetCharWidth32W

advapi32

EnumDependentServicesW

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

66eb7fee3043bc8f34bef23ad5bca3b4a19848ec5018b2cd27cc1aaf8f6c8995

kernel32

user32

gdi32

advapi32

ole32

generic