6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3

General

Target
6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3
Size 407KB
Sample241109-qrmvpstrdt
SHA256 54da38a3d387a8216919c39b463d1583f5c7a88f97abe6be432a6b19f03a5f3d
MD5 9295f33735eca876601f32f2efd03839
SHA1 6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3
SHA512 8023aff53a643dbd49d2e00d342243899a95a27543c06219ed03af62f16271f708de508620160bdf62a99961ba4f50508f1da9e34b6c8bc15cdaca6d18fc159c
SSDEEP 12288:lzUYiYOsN7Voz7Nhlg5dg/zP7NOuefZtFc+b:WsNiH4gbP7NOVtFcu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3

File Explorer

6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3

.exe 407KB

6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3

IMPHASH 406de4076009c796cb18d0fd9ae9b583
SHA256 54da38a3d387a8216919c39b463d1583f5c7a88f97abe6be432a6b19f03a5f3d
MD5 9295f33735eca876601f32f2efd03839
SHA1 6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3
SHA512 8023aff53a643dbd49d2e00d342243899a95a27543c06219ed03af62f16271f708de508620160bdf62a99961ba4f50508f1da9e34b6c8bc15cdaca6d18fc159c
SSDEEP 12288:lzUYiYOsN7Voz7Nhlg5dg/zP7NOuefZtFc+b:WsNiH4gbP7NOVtFcu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

51392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hevow cuxux.pdb

kernel32

WriteProfileSectionA SetLocaleInfoW FindFirstVolumeA GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterA GetTimeZoneInformation TerminateThread SetLastError GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileW BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomW LoadResource GetThreadPriority CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsW VirtualProtect LocalAlloc GetProfileSectionA GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx FindResourceA FormatMessageA SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID TerminateProcess GlobalFix HeapValidate InterlockedCompareExchange GetStartupInfoW SetCalendarInfoW DebugBreak SetConsoleTextAttribute GetLastError CopyFileA DisconnectNamedPipe GetCPInfoExW GetSystemWow64DirectoryW GetComputerNameExW ContinueDebugEvent InterlockedExchangeAdd GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW OutputDebugStringW lstrlenA WriteConsoleA GetPrivateProfileSectionNamesA GlobalWire FormatMessageW lstrcatA EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthW MoveFileA GetWriteWatch GetPrivateProfileStringW GetModuleHandleA DeleteAtom LoadLibraryW EnumDateFormatsA WriteConsoleOutputCharacterA TlsFree SetFirmwareEnvironmentVariableW GetProfileSectionW CommConfigDialogW GetConsoleAliasesLengthA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerW OpenFileMappingW SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FindNextVolumeMountPointW SetThreadPriority ReadConsoleW WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection SetConsoleCursorPosition LoadLibraryA DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep InterlockedIncrement InterlockedDecrement ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId SetHandleCount GetStdHandle GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBoundsRect

winhttp

WinHttpConnect

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

6a81d4eb79382ddeb633d7f8eeb7e9a3fcacaed3

kernel32

gdi32

winhttp

msimg32

generic