e6c6ad948e9ad054f789500a6fda9485c861af7b48ae04001a8fc555ac0b3be5[.]exe

General

Target
e6c6ad948e9ad054f789500a6fda9485c861af7b48ae04001a8fc555ac0b3be5.exe
Size 744KB
Sample260824-jmcevavalc
SHA256 e6c6ad948e9ad054f789500a6fda9485c861af7b48ae04001a8fc555ac0b3be5
MD5 175440137997a9ddee8d55496d31e931
SHA1 30fee56d96dd9fdeb293024c1f25ef1bc524ff39
SHA512 e018e2691ba479634b334fd70a08bbbce11ed4d7ed7f7afdd8ad103b6c57cde3c9284935b61cc3fdf92d8ed885de6926d3a9ab5f69d77adc4fe2e9fba6120c71
SSDEEP 12288:nmZnWX/XgipyUBkGJSfxLgK5a+xbsp5ygBQphnnVV1Gn1zDjeyx:mUvX/TCGwNjNgSpfMXx
TLSH
T19EF41252B6D3D073CB9AD4B53960D8710A7BBCF266B2C46737A803BE5E302839D16B51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6c6ad948e9ad054f789500a6fda9485c861af7b48ae04001a8fc555ac0b3be5.exe

File Explorer

e6c6ad948e9ad054f789500a6fda9485c861af7b48ae04001a8fc555ac0b3be5.exe

.exe 744KB

e6c6ad948e9ad054f789500a6fda9485c861af7b48ae04001a8fc555ac0b3be5.exe

IMPHASH 7641afddf4654d16195180656b07d0a1
SHA256 e6c6ad948e9ad054f789500a6fda9485c861af7b48ae04001a8fc555ac0b3be5
MD5 175440137997a9ddee8d55496d31e931
SHA1 30fee56d96dd9fdeb293024c1f25ef1bc524ff39
SHA512 e018e2691ba479634b334fd70a08bbbce11ed4d7ed7f7afdd8ad103b6c57cde3c9284935b61cc3fdf92d8ed885de6926d3a9ab5f69d77adc4fe2e9fba6120c71
SSDEEP 12288:nmZnWX/XgipyUBkGJSfxLgK5a+xbsp5ygBQphnnVV1Gn1zDjeyx:mUvX/TCGwNjNgSpfMXx
TLSH
T19EF41252B6D3D073CB9AD4B53960D8710A7BBCF266B2C46737A803BE5E302839D16B51
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tiz\32\sowagire\91-dikeraw.pdb

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement ReadConsoleA GetConsoleAliasA InterlockedDecrement GetCurrentProcess GetComputerNameW GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent FindNextVolumeMountPointA ReadConsoleW CreateRemoteThread GetConsoleAliasExesW CreateDirectoryExW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA GetTimeFormatW GetLocaleInfoA GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA SetStdHandle SetComputerNameA GetTempFileNameA LoadLibraryA InterlockedExchangeAdd GetNumberFormatW DeviceIoControl GetConsoleTitleW GetFileAttributesExW AddConsoleAliasA CloseHandle CreateFileA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapAlloc HeapFree RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc GetModuleHandleA FlushFileBuffers RtlUnwind HeapSize InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

GetAltTabInfoA SetMenu LoadKeyboardLayoutA CharUpperBuffA

advapi32

InitiateSystemShutdownA

Sharing