6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2

Sharing

Copy URL Twitter E-mail

General

Target
6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2
Size 253KB
Sample240708-3pht7avenq
SHA256 6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2
MD5 977f61a1a399eedfbc90ea3a0eaadf65
SHA1 35e68c650d49af232711c4029e8110fc8115b4cb
SHA512 ca6e6c17f82e3159cddb875334d24f0a30d351fd5b4cd89398c8e28eeaeeb442c2e1cbf55efad17cf06c99f93842678788cf895eeee0edbea3909f30d435f7a2
SSDEEP 3072:uL0OlvVfOeHIO4nloUU5gNYhgrB7b+jd8+pZV7ggkNL+Q/Wv5a+zxRH5GFeNz/2L:uL0OFVfTezUqQ472iOZVmL+Q+1V9SP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2

File Explorer

6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2

.exe 253KB

6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2

IMPHASH 766d3e509eb61151a290412f76f5d34a
SHA256 6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2
MD5 977f61a1a399eedfbc90ea3a0eaadf65
SHA1 35e68c650d49af232711c4029e8110fc8115b4cb
SHA512 ca6e6c17f82e3159cddb875334d24f0a30d351fd5b4cd89398c8e28eeaeeb442c2e1cbf55efad17cf06c99f93842678788cf895eeee0edbea3909f30d435f7a2
SSDEEP 3072:uL0OlvVfOeHIO4nloUU5gNYhgrB7b+jd8+pZV7ggkNL+Q/Wv5a+zxRH5GFeNz/2L:uL0OFVfTezUqQ472iOZVmL+Q+1V9SP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5787

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW CreateJobObjectW SleepEx GetCommProperties GetModuleHandleW GetConsoleAliasesA GlobalAlloc SetVolumeMountPointA lstrcpynW GetModuleFileNameW SetConsoleTitleA ReleaseActCtx SetLastError GetProcAddress BuildCommDCBW GetAtomNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter InterlockedExchangeAdd SetFileApisToANSI AddAtomA OpenJobObjectW FoldStringW EnumDateFormatsA lstrcatW FindFirstVolumeW LocalFree FlushFileBuffers CloseHandle GetLastError HeapFree MultiByteToWideChar HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

user32

GetProcessDefaultLayout

winhttp

WinHttpAddRequestHeaders

Name

.text

Size

180KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

600KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kagi

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xahitex

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ditic

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

54KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6376d8ff51ca98273aa55dda690d0a37021930f1a04edaac98801e33043734c2

kernel32

user32

winhttp

generic