6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af

General

Target
6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af
Size 247KB
Sample260802-fmch3adc94
SHA256 6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af
MD5 5536d6a95a05e3f668b7d3f151f8a4d4
SHA1 ff9accd5ac653f5b15d51d58c149424a0877a5d8
SHA512 ad93b24ada6c682986006556260e158684351ee8802488848bad099e1d3db5ff49ec570f3e20c7736a9f0695f622b3ec91f38ea2de255b3cc47a41d28159a878
SSDEEP 3072:HIkFT/LPx9Bxc4Gmh/nleohyfACK8UNY/JzYT02FtkOXy8k5vSPD7dJCD:HIkFtxc4GK/dA/SHFEWLCD
TLSH
T180447C15B7A50CFEEE77857CC9524905EB727C5647A0EACF03A04A964F23AE08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af

File Explorer

6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af

.exe 247KB

6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af

IMPHASH 49d97345f259b181d96c56b1dd22549a
SHA256 6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af
MD5 5536d6a95a05e3f668b7d3f151f8a4d4
SHA1 ff9accd5ac653f5b15d51d58c149424a0877a5d8
SHA512 ad93b24ada6c682986006556260e158684351ee8802488848bad099e1d3db5ff49ec570f3e20c7736a9f0695f622b3ec91f38ea2de255b3cc47a41d28159a878
SSDEEP 3072:HIkFT/LPx9Bxc4Gmh/nleohyfACK8UNY/JzYT02FtkOXy8k5vSPD7dJCD:HIkFtxc4GK/dA/SHFEWLCD
TLSH
T180447C15B7A50CFEEE77857CC9524905EB727C5647A0EACF03A04A964F23AE08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

26556

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle SetEvent WaitForSingleObject CreateEventA Sleep GetCurrentProcess GetModuleHandleA GetProcAddress LoadLibraryExA LoadLibraryA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess SetEndOfFile RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW HeapSize WriteConsoleW RtlUnwind

Name

.text

Size

158KB

Virtual Size

157KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6db72651ba4a4b69d8798409447d35dc40f6b3b646eec3134db4b565bc6f50af

kernel32

generic