6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e.exe
Size 208KB
Sample241124-q9greayphj
SHA256 6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e
MD5 87f94eb25d7c79d485ff042858bed87f
SHA1 de7f2c626ab175d29571fb57db853008452e97d3
SHA512 f203ea7833f0aab58fbda205897c9d2cc23eb827d9843fe6ef3b55aa874e8a23557b0544c26ec7e25b5232815edb7fd1bd3a5d40ec14af22e0f7aeb4726d3ea1
SSDEEP 6144:MZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5O:aquCuygMQjd5vJIBP1z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e.exe

File Explorer

6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e.exe

.exe 208KB

6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e.exe

IMPHASH 520c130e82cbe6120da2d52c754c2522
SHA256 6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e
MD5 87f94eb25d7c79d485ff042858bed87f
SHA1 de7f2c626ab175d29571fb57db853008452e97d3
SHA512 f203ea7833f0aab58fbda205897c9d2cc23eb827d9843fe6ef3b55aa874e8a23557b0544c26ec7e25b5232815edb7fd1bd3a5d40ec14af22e0f7aeb4726d3ea1
SSDEEP 6144:MZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5O:aquCuygMQjd5vJIBP1z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileTime SetEvent FindResourceA GetLogicalDriveStringsW CreateThread GetModuleHandleA GetSystemTime GetProcAddress DisconnectNamedPipe lstrlenA CreateMutexW GlobalGetAtomNameA lstrcat SetCalendarInfoW CreateFileMappingA SetComputerNameW GetThreadPriority IsBadReadPtr GetNumberFormatA EndUpdateResourceA OpenFile GetAtomNameW GetCurrentThread CreatePipe GetUserDefaultLangID GetFileType GetFullPathNameA RemoveDirectoryW FatalAppExitA lstrlenW GlobalDeleteAtom FindAtomW GetModuleFileNameW FileTimeToDosDateTime BeginUpdateResourceW GetEnvironmentVariableA GetWindowsDirectoryW lstrcatA GetNamedPipeInfo GetModuleHandleW GetCalendarInfoA GetLongPathNameA GetEnvironmentStringsW GetExpandedNameW GetLogicalDrives GetCurrentDirectoryA lstrcpyA GetStringTypeW SearchPathA lstrlen EnumDateFormatsA IsDebuggerPresent GetProcessHeaps SetThreadPriority GetTempPathW CreateMutexA

user32

GetIconInfo CreateDialogParamA GetSubMenu GetClassInfoA CreateAcceleratorTableW ChildWindowFromPoint GetScrollPos GetSystemMetrics LoadIconW BringWindowToTop RegisterWindowMessageW LoadImageW CreateDialogIndirectParamA CopyRect GetWindowTextLengthA GetSysColor

gdi32

CreateDCA GetPolyFillMode GetEnhMetaFileDescriptionW SetWorldTransform CreateMetaFileW SetStretchBltMode BeginPath GetTextCharset CreateColorSpaceA SetViewportOrgEx IntersectClipRect Ellipse GetMetaFileBitsEx CreateMetaFileA GetCharWidthW PaintRgn GetDeviceGammaRamp CombineRgn EnumICMProfilesW PlayMetaFile GetDCOrgEx

advapi32

RegOpenKeyA RegDeleteValueW RegOpenKeyA RegCloseKey

shlwapi

StrFormatByteSizeA PathCreateFromUrlA SHRegSetPathW

opengl32

glReadBuffer

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.PwM

Size

1KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.OwvyT

Size

3KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.MTxF

Size

1KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.XWRUxX

Size

1KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.YCYo

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tKhtUt

Size

2KB

Virtual Size

221KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

171KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6e099fddc1f44d1bd61e743ed0bda410f0e28354c5f82661f66cd25aaa6ad47e.exe

kernel32

user32

gdi32

advapi32

shlwapi

opengl32

generic