1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf

General

Target
1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf
Size 311KB
Sample260810-sbc2ns1emc
SHA256 1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf
MD5 a08a418786b5266d493456d712f92420
SHA1 fa32a37d37862f85fd77fcb7083c8aca6cdf1bd7
SHA512 088848c5205fb89e96ce20092fd7c894151265f7464b7b945c10d9077500950a42bafc94e645658291e28e4d0578c80b8c48a4b239ab58769d7cfc8a34e275de
SSDEEP 6144:qQR4p7r3+XYxA58bM6OZcrWaFQDyXXi4NdzurKO/0pdS5sH:qr8XyS8jQcr1FQISidzuryr0sH
TLSH
T10A64AE42BBD6A0B0CA5329325B697B624B7FA3440F10DEE7D3941D3D8F305C29A3AB55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf

File Explorer

1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf

.exe 311KB

1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf

IMPHASH 11fe7ef59aeac52b2100a4aa2604fe79
SHA256 1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf
MD5 a08a418786b5266d493456d712f92420
SHA1 fa32a37d37862f85fd77fcb7083c8aca6cdf1bd7
SHA512 088848c5205fb89e96ce20092fd7c894151265f7464b7b945c10d9077500950a42bafc94e645658291e28e4d0578c80b8c48a4b239ab58769d7cfc8a34e275de
SSDEEP 6144:qQR4p7r3+XYxA58bM6OZcrWaFQDyXXi4NdzurKO/0pdS5sH:qr8XyS8jQcr1FQISidzuryr0sH
TLSH
T10A64AE42BBD6A0B0CA5329325B697B624B7FA3440F10DEE7D3941D3D8F305C29A3AB55
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

193174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DecodePointer RaiseException GetLastError HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection CloseHandle InitializeCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW ResumeThread SetThreadAffinityMask EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent GetVersion VirtualAlloc VirtualFree GetModuleHandleW GetProcAddress GetStdHandle GetFileInformationByHandle ReadFile WriteFile GetSystemTimeAsFileTime GetCurrentProcess GetSystemInfo GetModuleHandleA GlobalMemoryStatus GetProcessAffinityMask CreateFileW SetFileTime SetLastError FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetCurrentDirectoryW CreateDirectoryW DeleteFileW SetFileAttributesW GetTempPathW GetCurrentProcessId GetCurrentThreadId GetTickCount FreeLibrary GetModuleFileNameW LoadLibraryExW MultiByteToWideChar WideCharToMultiByte SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW IsDebuggerPresent OutputDebugStringW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess QueryPerformanceCounter InitializeSListHead RtlUnwind EncodePointer VirtualQuery TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess LCMapStringW GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA WriteConsoleW

user32

CharUpperW

oleaut32

SysStringLen VariantCopy SysAllocStringLen SysFreeString VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

1f6d48abc6e750cc342f061eae718040663ff39ca997ba01afef2bac88b886bf

kernel32

user32

oleaut32

generic