6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e

Sharing

Copy URL Twitter E-mail

General

Target
6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e
Size 237KB
Sample260702-e2scdsh19r
SHA256 6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e
MD5 32afe8353a6bfa92a9ef3ecfe91e28f5
SHA1 fe8e15ec62c24e59f6617094bed57ef7054f81be
SHA512 a6593a35979431a99f9e29bb2b2a5f60c47c2176b2fcad6bc7a69c297345d13ecf5e3d5904af8e8761085831df779e4881dd8a330d3b4ae9207e9da30d98cd90
SSDEEP 3072:Dq/30JIVJ00azQuG5oTN6HzuQeQwBozvBThnpYaQXiCOP0Y2AEAg0FuSj/hCUUY:woQOEqQe2LPniaQXNY2AEAOzI
TLSH
T1AC34AE417581D4B3D9BE11350828DB39097D7C200FA1DDEFABE45E7E4E362C1AA31A7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e

File Explorer

6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e

.dll 237KB

6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e

IMPHASH 5e41c3363fb8e0532be97c95b2531702
SHA256 6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e
MD5 32afe8353a6bfa92a9ef3ecfe91e28f5
SHA1 fe8e15ec62c24e59f6617094bed57ef7054f81be
SHA512 a6593a35979431a99f9e29bb2b2a5f60c47c2176b2fcad6bc7a69c297345d13ecf5e3d5904af8e8761085831df779e4881dd8a330d3b4ae9207e9da30d98cd90
SSDEEP 3072:Dq/30JIVJ00azQuG5oTN6HzuQeQwBozvBThnpYaQXiCOP0Y2AEAg0FuSj/hCUUY:woQOEqQe2LPniaQXNY2AEAOzI
TLSH
T1AC34AE417581D4B3D9BE11350828DB39097D7C200FA1DDEFABE45E7E4E362C1AA31A7A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51387

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateEventW CreateFileW DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ResetEvent RtlUnwind SetEndOfFile SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

163KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

424B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e

kernel32

generic