cc0445fb1543b87407d2b01cc2f74ab16b465f41f309ab741d108b4472070ef3

General

Target
cc0445fb1543b87407d2b01cc2f74ab16b465f41f309ab741d108b4472070ef3
Size 350KB
Sample220129-nf88fsacen
SHA256 cc0445fb1543b87407d2b01cc2f74ab16b465f41f309ab741d108b4472070ef3
MD5 4f01e91b04ae5c731e6bf40f63a3b3a0
SHA1 16e01fb104f7cf0dc97c2dc4e3b4cab483ebd3b2
SHA512 a6f86d382e015ef37251fc5671ebbf15738f43f3c749f152ff3f537611b4d298c0e5e0e7c3fed7b60b8c6b56f99aa59f7683a3181fffed167911093820028aec
SSDEEP 6144:lzc5Nwc+7KIBSK9O94fXyTtSK27ITsqYigavwVfG:lzc7wc+7KIBSKUZTtF27u7
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cc0445fb1543b87407d2b01cc2f74ab16b465f41f309ab741d108b4472070ef3

.exe 350KB

cc0445fb1543b87407d2b01cc2f74ab16b465f41f309ab741d108b4472070ef3

IMPHASH 26b4026cf434e93fd49cb4272ab11b8e
SHA256 cc0445fb1543b87407d2b01cc2f74ab16b465f41f309ab741d108b4472070ef3
MD5 4f01e91b04ae5c731e6bf40f63a3b3a0
SHA1 16e01fb104f7cf0dc97c2dc4e3b4cab483ebd3b2
SHA512 a6f86d382e015ef37251fc5671ebbf15738f43f3c749f152ff3f537611b4d298c0e5e0e7c3fed7b60b8c6b56f99aa59f7683a3181fffed167911093820028aec
SSDEEP 6144:lzc5Nwc+7KIBSK9O94fXyTtSK27ITsqYigavwVfG:lzc7wc+7KIBSKUZTtF27u7
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9798

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetLocaleInfoA AllocConsole GetDefaultCommConfigW InterlockedDecrement GetComputerNameW SetEvent GetModuleHandleW FindActCtxSectionStringA GlobalAlloc Sleep DnsHostnameToComputerNameW GetMailslotInfo RaiseException GetStringTypeExA GetProcAddress VirtualAlloc SetStdHandle SetFileAttributesA BuildCommDCBW GetAtomNameA LoadLibraryA LocalAlloc FoldStringW GetSystemInfo GetModuleFileNameA SetConsoleTitleW GetModuleHandleA UpdateResourceW CreateMailslotA GetConsoleTitleW GetFileTime PeekConsoleInputA DeleteCriticalSection DeleteFileW GetPrivateProfileSectionW GetConsoleProcessList LCMapStringW SwitchToThread HeapSize MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetLastError EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ReadFile SetHandleCount GetStdHandle GetFileType HeapFree CloseHandle ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA GetStringTypeA GetStringTypeW SetFilePointer CreateFileA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode FlushFileBuffers SetEndOfFile GetProcessHeap WriteConsoleA GetConsoleOutputCP WriteConsoleW

winhttp

WinHttpCheckPlatform

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

cc0445fb1543b87407d2b01cc2f74ab16b465f41f309ab741d108b4472070ef3

kernel32

winhttp

msimg32