a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa

Sharing

Copy URL Twitter E-mail

General

Target
a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa
Size 203KB
Sample260810-datkpshq6x
SHA256 a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa
MD5 ab7beecb169a75b8b84f69d7cb2080cb
SHA1 c4321076dfee860f9759a5e7a9b5c247ac6b95a4
SHA512 753a67c133a6012b0a88cc55c85e24353504d575d26b79ef5f69bf34c95132650954da620a8d5dc7c68d1c2935fca35b739c79f5c66c87c8fdf6056beea45e0a
SSDEEP 1536:ooE7dfpVhwpArgN3eO/tkAmTmQFKJ72Fo50kinkKaKaJc444444444444444444f:hmzwqrgN3e8vVQXoWfnkKR7IHE
TLSH
T157143A12B5C559B9E40E8074831185B2563378851BE3EDFF0E656A3B2F1AEF2BF38614
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa

File Explorer

a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa

.exe 203KB

a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa

IMPHASH 9e43c909513a59aa1b18885f1f3dcb54
SHA256 a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa
MD5 ab7beecb169a75b8b84f69d7cb2080cb
SHA1 c4321076dfee860f9759a5e7a9b5c247ac6b95a4
SHA512 753a67c133a6012b0a88cc55c85e24353504d575d26b79ef5f69bf34c95132650954da620a8d5dc7c68d1c2935fca35b739c79f5c66c87c8fdf6056beea45e0a
SSDEEP 1536:ooE7dfpVhwpArgN3eO/tkAmTmQFKJ72Fo50kinkKaKaJc444444444444444444f:hmzwqrgN3e8vVQXoWfnkKR7IHE
TLSH
T157143A12B5C559B9E40E8074831185B2563378851BE3EDFF0E656A3B2F1AEF2BF38614
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

96792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SetTimer SetMenu AppendMenuW CreateMenu DestroyWindow MessageBoxW InvalidateRect DefWindowProcW PostQuitMessage KillTimer EndPaint BeginPaint GetCursorPos GetSystemMetrics DispatchMessageW TranslateMessage RegisterClassExW CreateWindowExW GetMessageW

gdi32

TextOutW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetModuleHandleA SetThreadStackGuarantee GetCurrentThread GetStartupInfoW GetEnvironmentVariableW HeapAlloc WriteConsoleW MultiByteToWideChar GetConsoleOutputCP IsProcessorFeaturePresent GetStdHandle RtlVirtualUnwind WideCharToMultiByte FormatMessageW GetConsoleMode ReleaseMutex CreateMutexA lstrlenW GetProcAddress GetCommandLineW SetLastError GetModuleFileNameW GetLastError GetProcessHeap HeapFree GetTickCount GetCurrentProcessId GetModuleHandleW GetFullPathNameW CreateFileW GetFileInformationByHandle GetFileInformationByHandleEx WaitForSingleObject CloseHandle CreateThread GetCurrentThreadId GetLocalTime GetComputerNameA GetSystemDirectoryA QueryPerformanceCounter HeapReAlloc GetCurrentDirectoryW RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile

vcruntime140

memcpy __CxxFrameHandler3 memset memcmp __current_exception_context __C_specific_handler __current_exception

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _initterm _set_app_type _exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _get_narrow_winmain_command_line _initialize_narrow_environment exit _configure_narrow_argv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

a6bc3621a4810ac414c6d5ed2de2c79c0ca5379af2e0d97d5e0b540a8e2d05fa

user32

gdi32

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic