6f478add759b6179c8814603fe60927d[.]exe

General

Target
6f478add759b6179c8814603fe60927d.exe
Size 359KB
Sample241218-l4hpasvreq
SHA256 e1def2eee311dc5f67ecced7e584dd2d25bd6b0262bfaeec5f8f49393ae5056b
MD5 6f478add759b6179c8814603fe60927d
SHA1 dd4dd72734c9d3b4fa8bf9299b688880cf17b4fc
SHA512 7682750ac87ae95750c7d86f0e08f8ebb6c2e82abefb7101ec376655af5af869d4abd82caee841dce08cd0178ec611aabcb5cfbf91e2ad3d7f8a52b367dfae49
SSDEEP 6144:X1ji2T2y7w2Puksw4bjGeztTO6h5XTwdR:X1jfql2GksvFNh5Dw3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f478add759b6179c8814603fe60927d.exe

File Explorer

6f478add759b6179c8814603fe60927d.exe

.exe 359KB

6f478add759b6179c8814603fe60927d.exe

IMPHASH 4207c4e5cb7ee42eba7e6c4b9ed1d6c9
SHA256 e1def2eee311dc5f67ecced7e584dd2d25bd6b0262bfaeec5f8f49393ae5056b
MD5 6f478add759b6179c8814603fe60927d
SHA1 dd4dd72734c9d3b4fa8bf9299b688880cf17b4fc
SHA512 7682750ac87ae95750c7d86f0e08f8ebb6c2e82abefb7101ec376655af5af869d4abd82caee841dce08cd0178ec611aabcb5cfbf91e2ad3d7f8a52b367dfae49
SSDEEP 6144:X1ji2T2y7w2Puksw4bjGeztTO6h5XTwdR:X1jfql2GksvFNh5Dw3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6263

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SearchPathW SetLocaleInfoA SetErrorMode InterlockedIncrement GetConsoleAliasA InterlockedDecrement SetDefaultCommConfigW ReadConsoleOutputAttribute GetEnvironmentStringsW GetTimeFormatA SetEvent GetModuleHandleW GetDateFormatA GetCommandLineA SetProcessPriorityBoost LoadLibraryW DeleteVolumeMountPointW GetFileAttributesW GetStartupInfoA SetLastError GetProcAddress BuildCommDCBW GetNumaHighestNodeNumber GetAtomNameA LoadLibraryA Process32Next LocalAlloc AddAtomW AddAtomA FoldStringA CreatePipe GetModuleHandleA OpenFileMappingW GetShortPathNameW FindFirstVolumeA EndUpdateResourceA GetVersionExA UnregisterWaitEx SetFileAttributesW CreateFileA WriteConsoleW GetLastError HeapFree HeapAlloc MultiByteToWideChar TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle WriteConsoleA GetConsoleOutputCP

user32

GetProcessDefaultLayout

Sharing