dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69

General

Target
dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69
Size 282KB
Sample240920-ghkvbasbjk
SHA256 dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69
MD5 56e3db9291d886a337ba3d4a12828bca
SHA1 a1ad3b87d4d58ee9a77d51cc23b3ea775c7c0a93
SHA512 1f2e29283a0ea3b921e0794e989d56eae0f01709b350b16a717840dd1d362354cfaa611729fa148b102f6cbca89ef6bfc3ece9334140044ee0eda912e9ca4c41
SSDEEP 6144:JF6xjwQaVe02c6drGhPby5TVnm+pzpj3Iin:2lwQaIJVIy5hnppzOi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69

File Explorer

dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69

.exe 282KB

dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69

IMPHASH 89b57b3bddbd2bff3c8134c8b08a765f
SHA256 dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69
MD5 56e3db9291d886a337ba3d4a12828bca
SHA1 a1ad3b87d4d58ee9a77d51cc23b3ea775c7c0a93
SHA512 1f2e29283a0ea3b921e0794e989d56eae0f01709b350b16a717840dd1d362354cfaa611729fa148b102f6cbca89ef6bfc3ece9334140044ee0eda912e9ca4c41
SSDEEP 6144:JF6xjwQaVe02c6drGhPby5TVnm+pzpj3Iin:2lwQaIJVIy5hnppzOi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState InterlockedDecrement GetCurrentProcess GetLogicalDriveStringsW InterlockedCompareExchange SetVolumeMountPointW GetModuleHandleW CreateNamedPipeW FindNextVolumeMountPointA GetNumberFormatA CreateActCtxW TlsSetValue SetFileShortNameW LoadLibraryW LocalShrink GetLocaleInfoW GetCalendarInfoA SetConsoleCP GetFileAttributesW GetModuleFileNameW GetShortPathNameA CreateJobObjectA LCMapStringA VerifyVersionInfoW InterlockedExchange GlobalUnfix GetLastError SetLastError GetProcAddress EnumSystemCodePagesW GetConsoleDisplayMode SetComputerNameA LoadModule SetThreadPriorityBoost GetConsoleAliasExesLengthA LocalAlloc GetFileType CreateFileMappingW CreateHardLinkW GetNumberFormatW CreateEventW FoldStringA SetEnvironmentVariableA EnumDateFormatsA GetProcessShutdownParameters LoadLibraryExA VirtualProtect GetCurrentDirectoryA GetFileTime OpenEventW PeekConsoleInputA SetCalendarInfoA GetVersionExA GetDiskFreeSpaceExW GetWindowsDirectoryW DebugBreak GetTempPathA EnumCalendarInfoExA CommConfigDialogW RaiseException RtlUnwind IsProcessorFeaturePresent GetStringTypeW LCMapStringW SetEndOfFile GetConsoleAliasExesA EnumCalendarInfoA GlobalMemoryStatus SetDefaultCommConfigA WideCharToMultiByte HeapFree HeapAlloc MultiByteToWideChar EncodePointer DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW HeapCreate ExitProcess WriteFile GetStdHandle GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsFree GetCurrentThreadId Sleep HeapSize SetUnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess LeaveCriticalSection EnterCriticalSection

user32

CharUpperA SetCaretPos LoadMenuA GetMenuStringW GetWindowLongW InsertMenuItemW GetMenu DrawStateW

gdi32

GetCharWidthFloatA CreateDCA GetCharWidth32A GetTextMetricsA GetBkMode

ole32

CoUnmarshalHresult

Name

.text

Size

222KB

Virtual Size

222KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

22KB

Virtual Size

32.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mixe

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sulehi

Size

512B

Virtual Size

214B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.dul

Size

1024B

Virtual Size

923B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jir

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dc06fd3eb04a603543131d5e55cf24eecd08ff6eded42a9cc12370dd7ef27c69

kernel32

user32

gdi32

ole32

generic