6064ef6e5e2d1c432491f675e551844c1b99da343c76f5b34c19a8d940b129e6[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
6064ef6e5e2d1c432491f675e551844c1b99da343c76f5b34c19a8d940b129e6.exe
Size 456KB
Sample240806-j79wvathpl
SHA256 6064ef6e5e2d1c432491f675e551844c1b99da343c76f5b34c19a8d940b129e6
MD5 9c35f1315cb51f68e401d53196daaf8b
SHA1 878abcbe65faa6a0697bef95955068aaf471dce8
SHA512 a08eb8c7e25e4fd17eee87e86494f78d17c0b1b7c1e5f02b16131b94640cff5c6b6114ad8a408efb5f27077306fbf105536de87393e63d75e6c339ef1c8cef17
SSDEEP 6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+w:2uWP/BZUyoLu8Agsmxwrvejkd2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6064ef6e5e2d1c432491f675e551844c1b99da343c76f5b34c19a8d940b129e6.exe

File Explorer

6064ef6e5e2d1c432491f675e551844c1b99da343c76f5b34c19a8d940b129e6.exe

.exe 456KB

6064ef6e5e2d1c432491f675e551844c1b99da343c76f5b34c19a8d940b129e6.exe

IMPHASH eca0c30b65294d02a6c6180a6b323b58
SHA256 6064ef6e5e2d1c432491f675e551844c1b99da343c76f5b34c19a8d940b129e6
MD5 9c35f1315cb51f68e401d53196daaf8b
SHA1 878abcbe65faa6a0697bef95955068aaf471dce8
SHA512 a08eb8c7e25e4fd17eee87e86494f78d17c0b1b7c1e5f02b16131b94640cff5c6b6114ad8a408efb5f27077306fbf105536de87393e63d75e6c339ef1c8cef17
SSDEEP 6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+w:2uWP/BZUyoLu8Agsmxwrvejkd2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect HeapSize GetStringTypeW GetStringTypeA GetLocaleInfoA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter LCMapStringW LCMapStringA InterlockedExchange RtlUnwind HeapReAlloc VirtualAlloc InitializeCriticalSection LoadLibraryA GetCPInfo GetSystemInfo GetACP EnterCriticalSection LeaveCriticalSection VirtualFree DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile TerminateProcess TlsGetValue TlsSetValue TlsFree GetLastError GetCurrentThreadId SetLastError TlsAlloc GetProcAddress HeapCreate VirtualQuery WaitForSingleObject HeapDestroy CreateEventW ExitProcess WideCharToMultiByte OutputDebugStringW CreateFileW ReadFile CloseHandle GetCurrentProcess MultiByteToWideChar GetModuleHandleW InterlockedIncrement GetModuleFileNameW lstrlenW HeapFree OutputDebugStringA MulDiv GetProcessHeap HeapAlloc GetOEMCP GetVersionExA GetCommandLineA GetStartupInfoA GetModuleHandleA

user32

GetClassInfoW FrameRect CharUpperBuffW IsIconic EnableWindow DrawIcon DeleteMenu SetTimer CreateAcceleratorTableW GetSystemMenu DrawMenuBar SetMenuItemInfoW GetWindowTextW GetDCEx RegisterClassW GetMenuItemInfoW SetScrollPos FillRect GetSystemMetrics GetDC MsgWaitForMultipleObjectsEx EndMenu DestroyCursor IsZoomed GetCursor GetScrollPos DispatchMessageW DefFrameProcW DestroyMenu ReleaseDC IsDialogMessageW GetScrollRange DefMDIChildProcW GetMenuStringW PeekMessageW CopyImage ShowCaret LoadIconW DrawFocusRect LoadBitmapW GetDlgCtrlID LoadStringW GetClassInfoExW DestroyIcon ShowWindow EndPaint PostMessageW CreateWindowExW BeginPaint LoadCursorW GetClientRect InsertMenuW CreateIcon DestroyWindow KillTimer GetScrollInfo CreateMenu

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

gdi32

Pie AngleArc Polygon CreateSolidBrush RectVisible CreateICW CreatePalette PolyBezierTo RoundRect RestoreDC GetWindowOrgEx CreateCompatibleBitmap MoveToEx GetTextMetricsW GetStockObject SetTextColor SetAbortProc SetBkMode StretchBlt CreateDCW GetDeviceCaps SetRectRgn GetEnhMetaFileHeader

ole32

OleInitialize CoUninitialize OleUninitialize CoTaskMemFree CoTaskMemAlloc IsEqualGUID CoInitialize CoCreateInstance

oleaut32

VariantChangeType SafeArrayPutElement VariantCopy VariantClear SafeArrayGetElement SafeArrayGetUBound SysFreeString GetErrorInfo VariantInit SafeArrayPtrOfIndex SysAllocStringLen SafeArrayGetLBound SafeArrayAccessData VariantCopyInd SysReAllocStringLen SafeArrayCreate SafeArrayUnaccessData

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winspool.drv

EnumPrintersW ord203 OpenPrinterW ClosePrinter DocumentPropertiesW