6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79

General

Target
6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79
Size 135KB
Sample260924-mn1qlstvbv
SHA256 6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79
MD5 dd4585f454e1cf38f342b40e72b3d026
SHA1 3e01c3a11ba1aa3fc67d761e5c0ac9dbad04dd80
SHA512 5b620f9192d7d03d483b9fb6f56f323af3fe5741ba75b4438583fbd0db22d44e215c788ac71511c95286ba1562bcd8c3568ad6ccba1567d921306367d41930c7
SSDEEP 3072:kR1ffEWI9x5+1gkx8qAKoyzlm16LMGNll:kLf8WlmbtR6L
TLSH
T119D39D167AE0C476D09D453D0A525B3AD3FBED60CEE19A03AF647B4C9D34A81DE2A313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79

File Explorer

6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79

.dll 135KB

6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79

IMPHASH b5650514065e5ff1b10084ec399807aa
SHA256 6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79
MD5 dd4585f454e1cf38f342b40e72b3d026
SHA1 3e01c3a11ba1aa3fc67d761e5c0ac9dbad04dd80
SHA512 5b620f9192d7d03d483b9fb6f56f323af3fe5741ba75b4438583fbd0db22d44e215c788ac71511c95286ba1562bcd8c3568ad6ccba1567d921306367d41930c7
SSDEEP 3072:kR1ffEWI9x5+1gkx8qAKoyzlm16LMGNll:kLf8WlmbtR6L
TLSH
T119D39D167AE0C476D09D453D0A525B3AD3FBED60CEE19A03AF647B4C9D34A81DE2A313
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15577

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

RtlUnwind GetCommandLineA RaiseException HeapAlloc HeapFree ExitProcess TerminateProcess HeapSize HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree SetUnhandledExceptionFilter LCMapStringA LCMapStringW VirtualAlloc IsBadWritePtr IsBadReadPtr IsBadCodePtr GetCPInfo GetACP GetOEMCP GetStringTypeA GetStringTypeW SetStdHandle FlushFileBuffers SetFilePointer WriteFile GetCurrentProcess GetProcessVersion GlobalFlags lstrcmpiW GetLastError SetErrorMode TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalAlloc LoadLibraryA InterlockedExchange FreeLibrary GetVersion lstrcatW GlobalAddAtomW GlobalFindAtomW lstrcpyW GetModuleHandleW LockResource FindResourceW LoadResource CloseHandle lstrcmpW GlobalDeleteAtom GetCurrentThread GetCurrentThreadId LocalFree lstrcpynW MultiByteToWideChar WideCharToMultiByte lstrlenA lstrlenW InterlockedDecrement InterlockedIncrement MulDiv GetModuleHandleA GetProcAddress SetLastError WritePrivateProfileStringW GetModuleFileNameW GetPrivateProfileStringW GetEnvironmentVariableW GlobalAlloc GlobalLock GlobalUnlock GetVersionExA GlobalFree

user32

RegisterClassW GetClassInfoW wsprintfW WinHelpW GetCapture GetTopWindow GetClientRect AdjustWindowRectEx GetSysColor MapWindowPoints SendDlgItemMessageA SendDlgItemMessageW LoadIconW IsDialogMessageW SetWindowTextW ShowWindow UnregisterClassW GetClassNameW PtInRect LoadStringW GetSysColorBrush DestroyMenu GetMenuItemID GetWindowTextW GetDlgCtrlID DefWindowProcW CreateWindowExW SetPropW GetPropW CallWindowProcW RemovePropW GetMessageTime GetMessagePos GetForegroundWindow GetWindow SetWindowLongW SetWindowPos GetMenu SystemParametersInfoW IsIconic GetWindowPlacement EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamW DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapW GetMenuState ModifyMenuW SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageW TranslateMessage DispatchMessageW GetActiveWindow ValidateRect IsWindowVisible PeekMessageW GetLastActivePopup IsWindowEnabled GetWindowLongW MessageBoxW SendMessageW PostQuitMessage CopyRect GetWindowDC ClientToScreen EnableWindow GrayStringW DrawTextW TabbedTextOutW IsRectEmpty InvalidateRect SetRect GetDesktopWindow SetWindowsHookExW LockWindowUpdate UnhookWindowsHookEx CallNextHookEx LoadCursorW SetCursor BringWindowToTop SetForegroundWindow SetFocus UpdateWindow SetCursorPos PostMessageW GetDCEx GetWindowRect GetKeyState GetDC ReleaseDC GetCursorPos GetSystemMetrics GetMenuItemCount RegisterWindowMessageW GetSubMenu GetParent

gdi32

PatBlt Rectangle Ellipse GetStockObject CreatePen GetTextExtentPoint32W BitBlt CreateCompatibleDC CreateBitmapIndirect GetObjectW GetDeviceCaps GetDIBits RealizePalette SelectPalette DeleteObject CreateCompatibleBitmap GetBkColor DPtoLP GetViewportExtEx GetWindowExtEx GetMapMode LPtoDP PtVisible RectVisible TextOutW ExtTextOutW Escape DeleteDC SaveDC RestoreDC SelectObject SetBkColor SetROP2 SetTextColor SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetClipBox CreateBitmap RoundRect

Name

.text

Size

78KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.capdata

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6e62fec709453a4617307c838f910b44f49456ff655a93b33b1375425e808e79

kernel32

user32

gdi32

generic