1cd728cc66d9e804ad136f48bca36795[.]exe

General

Target
1cd728cc66d9e804ad136f48bca36795.exe
Size 1.7MB
Sample220519-v1d2dachgl
SHA256 0aaacc963fd27abede6b71c1de18918d07fbbdf6b58bcdf71ca2f6dbbda80c29
MD5 1cd728cc66d9e804ad136f48bca36795
SHA1 3a3ee858cec78af0b8e62524220b32bab0e23b71
SHA512 378b9f347d88216ca801321c084b79b620b01610870601611e337a53fb40e8a31d71a25cc0c2246fe79fd686f531462daff89fa33e79642ffaf79068c40976c3
SSDEEP 49152:BNfDGkkPY1avegoqFRSFrS6Bjdd8hIE9xd/8/1LFI0/:BNfDGtPMavegoERSVS6BjddCX9xd/8f
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

1cd728cc66d9e804ad136f48bca36795.exe

.exe 1.7MB

1cd728cc66d9e804ad136f48bca36795.exe

IMPHASH 37a87ba4c777dcd1db50684f6b029f1b
SHA256 0aaacc963fd27abede6b71c1de18918d07fbbdf6b58bcdf71ca2f6dbbda80c29
MD5 1cd728cc66d9e804ad136f48bca36795
SHA1 3a3ee858cec78af0b8e62524220b32bab0e23b71
SHA512 378b9f347d88216ca801321c084b79b620b01610870601611e337a53fb40e8a31d71a25cc0c2246fe79fd686f531462daff89fa33e79642ffaf79068c40976c3
SSDEEP 49152:BNfDGkkPY1avegoqFRSFrS6Bjdd8hIE9xd/8/1LFI0/:BNfDGtPMavegoERSVS6BjddCX9xd/8f
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

d6:71:a6:e2:b4:cf:f9:46:41:dd:28:7e:7b:e6:8c:6a:36:43:5c:3a:4a:45:e7:07:8e:c9:78:ba:23:d4:8d:43

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

42808

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetSystemMetrics GetSysColorBrush FindWindowA

kernel32

GetProcAddress CreateFileW HeapSize GetProcessHeap GetCurrentThreadId MultiByteToWideChar GetLastError GetCurrentProcessId GetConsoleWindow WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetStdHandle RaiseException RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary WriteConsoleW LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

Name

tTDXt

Size

149KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

bapoIlZ

Size

842KB

Virtual Size

841KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

VaYWta

Size

140KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

IXEOa

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

tbkC0_

Size

551KB

Virtual Size

550KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

jWCcoc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1cd728cc66d9e804ad136f48bca36795.exe

PE Signature issue

user32

kernel32