6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345

Sharing

Copy URL Twitter E-mail

General

Target
6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345
Size 954KB
Sample260925-t244hsff96
SHA256 6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345
MD5 91e51accd87927729780b73f25c8b905
SHA1 763ab5f652733dbb16868799fc2a16e95c6348f7
SHA512 f0df895b34204e8d823f9c6ee5e7fabbbaf28d97d28d82c45490eab0d2f7107181a9683c03ab54985ffb02859375c2b8aadef4c8d51c8b62d37d185877e7787c
SSDEEP 12288:IPP0F9FZQl5alJxUp8DiLaAOIX7cvakQfhxUp8DG/TI1Akvcc4x2LeFDf:is9FZLJmL1x3NccI
TLSH
T101259C13F722935DC61A6878CB61C794B3317C40AF16D24FB9A93BA08D9B5F04EE62D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345

File Explorer

6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345

.exe 954KB

6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345

IMPHASH 319dfafabf62fb936247eba53b2bad53
SHA256 6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345
MD5 91e51accd87927729780b73f25c8b905
SHA1 763ab5f652733dbb16868799fc2a16e95c6348f7
SHA512 f0df895b34204e8d823f9c6ee5e7fabbbaf28d97d28d82c45490eab0d2f7107181a9683c03ab54985ffb02859375c2b8aadef4c8d51c8b62d37d185877e7787c
SSDEEP 12288:IPP0F9FZQl5alJxUp8DiLaAOIX7cvakQfhxUp8DG/TI1Akvcc4x2LeFDf:is9FZLJmL1x3NccI
TLSH
T101259C13F722935DC61A6878CB61C794B3317C40AF16D24FB9A93BA08D9B5F04EE62D4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

59220

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile

dcomp

DCompositionCreateDevice

dwrite

DWriteCreateFactory

user32

TranslateMessage DispatchMessageA PeekMessageA DefWindowProcA PostQuitMessage MessageBoxA LoadCursorA GetCursorPos GetWindowRect GetSystemMetrics ReleaseCapture SetCapture SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW

ole32

CoUninitialize CoCreateInstance CoInitializeEx

shlwapi

PathRemoveFileSpecW

kernel32

WriteConsoleW LeaveCriticalSection SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetStringTypeW SetStdHandle GetFileType GetProcessHeap LCMapStringW LoadLibraryExW VirtualProtect QueryPerformanceCounter QueryPerformanceFrequency CreateFileW WriteFile CloseHandle GetFileAttributesW GetModuleFileNameW SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetStdHandle IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW

Name

.text

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

802KB

Virtual Size

801KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6d567c6ae7adbf27e3c88006bc3169565b6a1004756f9c5e333e0f0ce006b345

d3d11

d3dcompiler_47

dcomp

dwrite

user32

ole32

shlwapi

kernel32

generic