6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7

General

Target
6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7
Size 80KB
Sample260808-je915ssfnd
SHA256 6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7
MD5 f5b9312f03d8de300d58c2cdbf86b9f4
SHA1 3b80e3278aeca597b5a8d98408fccf37408a3dde
SHA512 ccea43bd619d81020d40519720d0366638342609e60860fd007cb296a98e3d73e6f031ce288fcf51ec6d13dbcc827bfa45d437425f7e53b5d0e997864d2ef2bf
SSDEEP 1536:kXynnkmBHP6wWCwd8ENRDOeQF6/RYlU/pcN+IsWp8cdGf4ti+LDEDJbl:kvwWPrNhOeI6OO/idGf4tiq4DJh
TLSH
T17B834A17B5C19471E8B30A3A1874D9A1892EF8210F35DEEB3788167A4F381D19D36E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7

File Explorer

6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7

.exe 80KB

6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7

IMPHASH 4d29586e16dbe4c87985a35fc521fd9a
SHA256 6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7
MD5 f5b9312f03d8de300d58c2cdbf86b9f4
SHA1 3b80e3278aeca597b5a8d98408fccf37408a3dde
SHA512 ccea43bd619d81020d40519720d0366638342609e60860fd007cb296a98e3d73e6f031ce288fcf51ec6d13dbcc827bfa45d437425f7e53b5d0e997864d2ef2bf
SSDEEP 1536:kXynnkmBHP6wWCwd8ENRDOeQF6/RYlU/pcN+IsWp8cdGf4ti+LDEDJbl:kvwWPrNhOeI6OO/idGf4tiq4DJh
TLSH
T17B834A17B5C19471E8B30A3A1874D9A1892EF8210F35DEEB3788167A4F381D19D36E7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetMessageW DefWindowProcW MessageBoxW CreateWindowExW SendMessageW SetWindowTextW RegisterClassExW wsprintfA ShowWindow DispatchMessageW GetSysColor TranslateMessage LoadCursorW PostQuitMessage GetSysColorBrush UpdateWindow GetWindowTextW

kernel32

WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW ReadFile GetModuleFileNameA WriteFile lstrcatA MultiByteToWideChar CreateFileA CloseHandle GetModuleHandleW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter DecodePointer TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary RaiseException LoadLibraryExW CreateFileW GetCurrentProcess GetProcAddress GetStdHandle ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW

gdi32

SetBkColor CreateFontW

Sharing

General

Malware Config

Signatures

File Explorer

6ccd4e3e4f31e14742b7c705684be13d5ef64b401d3c8edf85ae416c76d5dbe7

user32

kernel32

gdi32

generic