c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb

General

Target
c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb
Size 198KB
Sample260924-mn12dabe67
SHA256 c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb
MD5 e5c6fc3eaf741f7e7436ce6515122ce5
SHA1 6ee15f6cdc83c3436afd1535586fd7d1bfad534c
SHA512 9e1e9d7b3f026f5c5aeec0a948dc80e0f825ffd5b5009280cbd9d945d91e283e1d230eb2e85628690862e6cc38ce78d01e9283d52a021d798a54782f8ba753f9
SSDEEP 6144:gAJPm1P8lE3ELvZTjGxubPw6YGtO91VcRTBqHY2gRay:gABmR8leEDFYGto1VcRTsHGU
TLSH
T13A147C8573A000B9ED779238C9E34A56E672381503B09BCF435057BA9F277D1B6387B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb

File Explorer

c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb

.dll 198KB

c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb

IMPHASH a02cd557ae9bf159ad0ea6ea69aa20e8
SHA256 c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb
MD5 e5c6fc3eaf741f7e7436ce6515122ce5
SHA1 6ee15f6cdc83c3436afd1535586fd7d1bfad534c
SHA512 9e1e9d7b3f026f5c5aeec0a948dc80e0f825ffd5b5009280cbd9d945d91e283e1d230eb2e85628690862e6cc38ce78d01e9283d52a021d798a54782f8ba753f9
SSDEEP 6144:gAJPm1P8lE3ELvZTjGxubPw6YGtO91VcRTBqHY2gRay:gABmR8leEDFYGto1VcRTsHGU
TLSH
T13A147C8573A000B9ED779238C9E34A56E672381503B09BCF435057BA9F277D1B6387B6
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

48436

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle GetLastError MultiByteToWideChar Sleep GetPrivateProfileIntW HeapSize HeapReAlloc OutputDebugStringW WriteConsoleW LCMapStringW GetStringTypeW FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetModuleFileNameW GetModuleHandleExW ExitProcess GetProcessHeap GetStartupInfoW GetStdHandle SetFilePointerEx ReadConsoleW DeleteCriticalSection GetConsoleMode GetConsoleCP WideCharToMultiByte WriteFile FlushFileBuffers SetLastError GetCPInfo GetOEMCP GetACP IsValidCodePage DecodePointer EncodePointer GetCommandLineA RtlUnwindEx IsProcessorFeaturePresent IsDebuggerPresent FreeLibrary DeleteFileW CreateFileW GlobalFree GlobalUnlock GlobalLock GlobalAlloc MulDiv GetCurrentThreadId VerifyVersionInfoW GetModuleHandleA VerSetConditionMask LoadLibraryExW GetProcAddress GetModuleHandleW GetCurrentProcess ReadFile HeapFree HeapAlloc SetStdHandle GetFileType EnterCriticalSection LeaveCriticalSection SetEndOfFile

user32

UpdateWindow EnableWindow SetDlgItemTextW EndDialog CreateDialogParamW DestroyWindow LoadCursorW SetCursor PeekMessageW DispatchMessageW TranslateMessage DrawIconEx LoadImageW GetClassNameW EnumChildWindows GetParent GetWindowLongW InflateRect CopyRect FrameRect FillRect DrawFocusRect GetSysColor GetWindowRect GetClientRect GetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC DrawTextExW DrawTextW GetSystemMetrics IsWindowEnabled GetFocus GetDlgCtrlID GetDlgItem IsWindowVisible DrawFrameControl DrawEdge SystemParametersInfoW RedrawWindow SendMessageW

gdi32

GetNearestPaletteIndex CreatePalette SetBkMode SetBkColor SelectObject Rectangle GetTextExtentPoint32W GetStockObject GetDeviceCaps CreateSolidBrush CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteObject SetTextColor

comctl32

ord413 ord412 ord410

Sharing

General

Malware Config

Signatures

File Explorer

c6bc9b03e6601cb81ff5ea1f46f132d2da07475208dd1fab9a1306afa3d17ccb

kernel32

user32

gdi32

comctl32

generic