a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d

Sharing

Copy URL Twitter E-mail

General

Target
a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d
Size 3.3MB
Sample260401-vbrk6set5l
SHA256 a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d
MD5 e24de9658bafd3809385636932607d23
SHA1 7060fbd6ac6b79fa5fa6b851156b10699afa1b87
SHA512 d4202fb6c7efd230472bcd7ed79c5aa43ee66415e942d238350fcf584350fc4158f4051486540bab2e3e08a94baf10ccfafa1d3b1758c3ada46365d284d70020
SSDEEP 49152:D6yUWOvfW2charw0aRPFGnUgkBeS6Ll6jBVmgbQIzZMPXpB91rHpE:D6yUWufW2PrwJnGUgkwS+2gnLrHpE
TLSH
T1A8F5BE5BDB929AE8F68D14765B680154EB1EF625B25F2360349C024CCF873878FA5E3C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d

File Explorer

a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d

.exe 3.3MB

a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d

IMPHASH 02e28361a03cf60be52270f54ba9d56d
SHA256 a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d
MD5 e24de9658bafd3809385636932607d23
SHA1 7060fbd6ac6b79fa5fa6b851156b10699afa1b87
SHA512 d4202fb6c7efd230472bcd7ed79c5aa43ee66415e942d238350fcf584350fc4158f4051486540bab2e3e08a94baf10ccfafa1d3b1758c3ada46365d284d70020
SSDEEP 49152:D6yUWOvfW2charw0aRPFGnUgkBeS6Ll6jBVmgbQIzZMPXpB91rHpE:D6yUWufW2PrwJnGUgkwS+2gnLrHpE
TLSH
T1A8F5BE5BDB929AE8F68D14765B680154EB1EF625B25F2360349C024CCF873878FA5E3C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

40133

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe GetProcessHeap GetUserDefaultLangID GetCommandLineA GlobalAlloc lstrlenW SetLastError GetProcAddress IsValidCodePage LoadLibraryA GetOEMCP GetModuleHandleA HeapSetInformation GetCurrentProcessId lstrlenA lstrcpyA LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA LCMapStringW GetSystemDefaultLangID GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetCPInfo GetACP HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte

user32

PostQuitMessage GetTopWindow IsZoomed GetParent GetDoubleClickTime GetWindowLongA IsWindowVisible SetWindowTextA EnableWindow GetDlgCtrlID DefWindowProcW

advapi32

RegOpenKeyExW

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

fINoPCPQ

Size

14KB

Virtual Size

13KB

Characteristics

Name

zfJrFAxl

Size

1KB

Virtual Size

1KB

Characteristics

Name

vroCNIQB

Size

2KB

Virtual Size

2KB

Characteristics

Name

QddAZKoy

Size

1KB

Virtual Size

1KB

Characteristics

Name

YJfphzlY

Size

1.6MB

Virtual Size

1.6MB

Characteristics

Name

FsiUbJIV

Size

87KB

Virtual Size

87KB

Characteristics

Name

MobDpWqx

Size

2KB

Virtual Size

1KB

Characteristics

Name

hQIIlkqj

Size

14KB

Virtual Size

13KB

Characteristics

Name

IOQBoVEq

Size

2KB

Virtual Size

2KB

Characteristics

Name

MkyCPoCD

Size

26KB

Virtual Size

26KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

a6773eebea2d665120543f21a39b9994c54b473e1c8810376590557ef9af689d

kernel32

user32

advapi32

generic