60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0

Sharing

Copy URL Twitter E-mail

General

Target
60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0
Size 290KB
Sample240702-vfglrsscmg
SHA256 60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0
MD5 2f694c5080f96479f2bea3f4d07200f1
SHA1 e67d58f0003e4506711c76e82915ba4f7d53b893
SHA512 5bd183c62585d02aa98909b748dc9395fd1f942a5f3a54319f4a0a404a26bd595b4cd14da3111abfc82f2067170d771e0e85293340cc6fe35878501796a76d8e
SSDEEP 6144:KPLVLEybu2Ts3URzcx4ahao3vewTbSo2BOwCk9ZC7:KP5LLbxsEuxj/3veUbZ2BOw1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0

File Explorer

60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0

.exe 290KB

60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0

IMPHASH 039b1745d3ec0d69297e0716539e775c
SHA256 60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0
MD5 2f694c5080f96479f2bea3f4d07200f1
SHA1 e67d58f0003e4506711c76e82915ba4f7d53b893
SHA512 5bd183c62585d02aa98909b748dc9395fd1f942a5f3a54319f4a0a404a26bd595b4cd14da3111abfc82f2067170d771e0e85293340cc6fe35878501796a76d8e
SSDEEP 6144:KPLVLEybu2Ts3URzcx4ahao3vewTbSo2BOwCk9ZC7:KP5LLbxsEuxj/3veUbZ2BOw1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetVolumeMountPointW GetComputerNameW SleepEx GetCommProperties GetModuleHandleW GetTickCount ReadConsoleOutputA GlobalAlloc lstrcpynW WriteConsoleW GetModuleFileNameW GetConsoleAliasesW CreateJobObjectW GetProcAddress BuildCommDCBW GetAtomNameA LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd AddAtomA FoldStringA lstrcatW EnumDateFormatsW FindFirstVolumeA AreFileApisANSI OpenJobObjectA ZombifyActCtx GetLastError GetConsoleAliasExesLengthA CreateFileA GetConsoleOutputCP MultiByteToWideChar HeapReAlloc HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep HeapSize ExitProcess HeapCreate VirtualFree HeapFree VirtualAlloc WriteFile GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle WriteConsoleA

gdi32

GetBoundsRect

advapi32

EnumDependentServicesA

ole32

CoTaskMemRealloc

winhttp

WinHttpAddRequestHeaders

Sharing

General

Malware Config

Signatures

File Explorer

60ec2c168365bcd32ac7a7ae6ad0d1fea4cc948590ac0ed7c621599f256964a0

kernel32

gdi32

advapi32

ole32

winhttp

generic