d6bc7e1a8b5256f7d2c5d3d344b3bc7f[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe
Size 457KB
Sample241009-vcs6dstdna
SHA256 d134bebdf067cc8f99dac75e8b1c22c0f032d29c0baab49d0f8a4eef5304c5d0
MD5 d6bc7e1a8b5256f7d2c5d3d344b3bc7f
SHA1 b27a8deb3c6a5373c80b210f318fa2521a6840f8
SHA512 57d82526bc1603760a5c8843df8835f3493006f9a9eabc687ba1fbf190c3ebd48c08eac5d7fc0d0857cde266059a5c87fb0968b33e730a553b34fe8582cee908
SSDEEP 6144:JIYGxzaff+ssRhLRCS0LTHhmd0ButsqpSrG/OHgLBs1891H71WeTTz3:t9evvJETBUYutxc6/WgG18v1W2f3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe

File Explorer

d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe

.exe 457KB

d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe

IMPHASH 2f55e27b71ad52ab5e8947ebd770f2c7
SHA256 d134bebdf067cc8f99dac75e8b1c22c0f032d29c0baab49d0f8a4eef5304c5d0
MD5 d6bc7e1a8b5256f7d2c5d3d344b3bc7f
SHA1 b27a8deb3c6a5373c80b210f318fa2521a6840f8
SHA512 57d82526bc1603760a5c8843df8835f3493006f9a9eabc687ba1fbf190c3ebd48c08eac5d7fc0d0857cde266059a5c87fb0968b33e730a553b34fe8582cee908
SSDEEP 6144:JIYGxzaff+ssRhLRCS0LTHhmd0ButsqpSrG/OHgLBs1891H71WeTTz3:t9evvJETBUYutxc6/WgG18v1W2f3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

262837

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement GetLogicalDriveStringsW SetEnvironmentVariableW SetVolumeMountPointW GetTimeFormatA GetTickCount CreateNamedPipeW LocalFlags GetNumberFormatA ClearCommBreak GetConsoleAliasExesW GetEnvironmentStrings SetFileShortNameW LoadLibraryW _hread GetCalendarInfoA SetVolumeMountPointA GetVersionExW EnumSystemCodePagesA CreateSemaphoreA GetFileAttributesW CreateProcessA GetModuleFileNameW CreateActCtxA CreateJobObjectA VerifyVersionInfoW InterlockedExchange EnumCalendarInfoW GetLastError GetCurrentDirectoryW GetProcAddress CopyFileA SetComputerNameA SetFileAttributesA DefineDosDeviceA GlobalFree FindClose LoadLibraryA LocalAlloc CreateHardLinkW GetNumberFormatW OpenEventA FoldStringW SetEnvironmentVariableA GlobalWire GetModuleFileNameA EnumDateFormatsA GetShortPathNameW GetDiskFreeSpaceExA ReadConsoleInputW GetCurrentProcessId DebugBreak GetTempPathA TlsFree LCMapStringW InterlockedIncrement CommConfigDialogA GetLocaleInfoA EnumCalendarInfoA SetFilePointer GetStdHandle GetComputerNameA CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle FlushFileBuffers Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar GetCPInfo HeapCreate VirtualFree VirtualAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue SetLastError GetCurrentThreadId HeapSize ExitProcess WriteFile SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetLocaleInfoW GetModuleHandleA GetConsoleCP GetConsoleMode

gdi32

CreateDCW CreateCompatibleBitmap GetCharWidth32A GetCharWidthI

advapi32

ReadEventLogW

ole32

CoSuspendClassObjects

winhttp

WinHttpOpen WinHttpCheckPlatform

msimg32

AlphaBlend