6db133777254e95518e1a5b4e17cab90[.]exe

General

Target
6db133777254e95518e1a5b4e17cab90.exe
Size 367KB
Sample241020-srbhsaxarr
SHA256 ddea35e103b6f35b1fd086a4f461c48edbd63f3633e8d3780da7008add4f727f
MD5 6db133777254e95518e1a5b4e17cab90
SHA1 fd52a2d35f53eeef0fd79a436564da4b6aaf625c
SHA512 39f9c8e1b71333350e8b129ec13f6816d4f9acd8e7d5e1d74f12f5693cf2fccf67d9993e748f4e6233ae2e550b7bb24bedc9db239a69aa8e4c76293722ae2398
SSDEEP 6144:gloL9zQ53dHgLuViKumLtHP2IufL8dORf:galQ5NJViXetHPJuGGf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6db133777254e95518e1a5b4e17cab90.exe

File Explorer

6db133777254e95518e1a5b4e17cab90.exe

.exe 367KB

6db133777254e95518e1a5b4e17cab90.exe

IMPHASH 75f9fffd32a279be2c5f550d3fb72d16
SHA256 ddea35e103b6f35b1fd086a4f461c48edbd63f3633e8d3780da7008add4f727f
MD5 6db133777254e95518e1a5b4e17cab90
SHA1 fd52a2d35f53eeef0fd79a436564da4b6aaf625c
SHA512 39f9c8e1b71333350e8b129ec13f6816d4f9acd8e7d5e1d74f12f5693cf2fccf67d9993e748f4e6233ae2e550b7bb24bedc9db239a69aa8e4c76293722ae2398
SSDEEP 6144:gloL9zQ53dHgLuViKumLtHP2IufL8dORf:galQ5NJViXetHPJuGGf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue GetConsoleAliasExesA CreateProcessW ClearCommError InterlockedIncrement GetCurrentProcess SetEnvironmentVariableW GetComputerNameW GetTickCount CreateNamedPipeW EnumTimeFormatsW CreateActCtxW GetCurrencyFormatW GetEnvironmentStrings SetFileShortNameW GetLocaleInfoW ReadConsoleInputA SetVolumeMountPointA GetVersionExW GetTimeFormatW GetFileAttributesW GetModuleFileNameW GetShortPathNameA CreateJobObjectA LCMapStringA VerifyVersionInfoW InterlockedExchange GetLogicalDriveStringsA GetLastError SetLastError GetProcAddress VirtualAlloc SetComputerNameA DefineDosDeviceA GlobalFree GetTempFileNameA LoadLibraryA CreateSemaphoreW InterlockedExchangeAdd GetNumberFormatW OpenEventA GetCommMask OpenJobObjectW GetModuleFileNameA GlobalUnWire GetCurrentDirectoryA GetShortPathNameW GetDiskFreeSpaceExA SetFileAttributesW CommConfigDialogW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte HeapSize GetLocaleInfoA GetModuleHandleA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

user32

GetAltTabInfoW

Sharing