6b20888a57749e9e7bdd567daa7347e525018e32aa98d61f684f3ed9372a4239[.]exe

General

Target
6b20888a57749e9e7bdd567daa7347e525018e32aa98d61f684f3ed9372a4239.exe
Size 787KB
Sample260809-prb8jaer2t
SHA256 6b20888a57749e9e7bdd567daa7347e525018e32aa98d61f684f3ed9372a4239
MD5 4d0ceda3137040b9c750544b48bd17a7
SHA1 74b2a78c2490c573431beb57bbe88f3cccf796b3
SHA512 545ad96759b50f8811b14598822cc869ff953e7d1cb3a29811a00fbfe6c299e8e4a3df9ff82911e701ae479b4aa35e043e894d267392bf1c0a674836406f94cf
SSDEEP 24576:YtrwtBqtRBE7rHSHci247xkUhybFUckRO:Cr3Bsy8fbUHRO
TLSH
T1BF0501006AA0A893DF9507774A1ECDA8D56FBC11FB71144E3290379F68B31A1462EB7F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b20888a57749e9e7bdd567daa7347e525018e32aa98d61f684f3ed9372a4239.exe

File Explorer

6b20888a57749e9e7bdd567daa7347e525018e32aa98d61f684f3ed9372a4239.exe

.exe 787KB

6b20888a57749e9e7bdd567daa7347e525018e32aa98d61f684f3ed9372a4239.exe

IMPHASH 811cfa7d69bb5a1638da0cef5aaff5e9
SHA256 6b20888a57749e9e7bdd567daa7347e525018e32aa98d61f684f3ed9372a4239
MD5 4d0ceda3137040b9c750544b48bd17a7
SHA1 74b2a78c2490c573431beb57bbe88f3cccf796b3
SHA512 545ad96759b50f8811b14598822cc869ff953e7d1cb3a29811a00fbfe6c299e8e4a3df9ff82911e701ae479b4aa35e043e894d267392bf1c0a674836406f94cf
SSDEEP 24576:YtrwtBqtRBE7rHSHci247xkUhybFUckRO:Cr3Bsy8fbUHRO
TLSH
T1BF0501006AA0A893DF9507774A1ECDA8D56FBC11FB71144E3290379F68B31A1462EB7F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5917

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW GetModuleFileNameW SetConsoleTitleA SetCurrentDirectoryA FindFirstFileExA GetCurrentDirectoryW EnumCalendarInfoW GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA LocalAlloc SetConsoleCtrlHandler HeapWalk FindAtomA WaitForMultipleObjects EnumDateFormatsW GetSystemTime SetLastError GetLocaleInfoA HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing