cffe77cf0faff802b48c8dfcda7ae6bdef09e1a514a0d64a43113ec02b47dde6

General

Target
cffe77cf0faff802b48c8dfcda7ae6bdef09e1a514a0d64a43113ec02b47dde6
Size 140KB
Sample221107-xg2dnscfg8
SHA256 cffe77cf0faff802b48c8dfcda7ae6bdef09e1a514a0d64a43113ec02b47dde6
MD5 0530e0b1f03b293aef48bad59e9aa04e
SHA1 8b374818e4ce75de81620e4d6ae85b90720eae8d
SHA512 daceab921aa9f4122b0e22b089ff37284d8bbf1122cc05732dc7df7c4ad4de3bc92515499120379c867d3da8e858ca48d47c406315a1d2567eefd44b507d9b58
SSDEEP 1536:nnMg2OVLjlevyaRLBnLuRgiaUxRIxecePKH5nKLV+q:M0LpeTLlamiaUxRIxecePKQr
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cffe77cf0faff802b48c8dfcda7ae6bdef09e1a514a0d64a43113ec02b47dde6

.exe 140KB

cffe77cf0faff802b48c8dfcda7ae6bdef09e1a514a0d64a43113ec02b47dde6

IMPHASH 3177f85e66dc6a21eeb12e0cf673ec21
SHA256 cffe77cf0faff802b48c8dfcda7ae6bdef09e1a514a0d64a43113ec02b47dde6
MD5 0530e0b1f03b293aef48bad59e9aa04e
SHA1 8b374818e4ce75de81620e4d6ae85b90720eae8d
SHA512 daceab921aa9f4122b0e22b089ff37284d8bbf1122cc05732dc7df7c4ad4de3bc92515499120379c867d3da8e858ca48d47c406315a1d2567eefd44b507d9b58
SSDEEP 1536:nnMg2OVLjlevyaRLBnLuRgiaUxRIxecePKH5nKLV+q:M0LpeTLlamiaUxRIxecePKQr
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

11045

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

?terminate@@YAXXZ __set_app_type __p__fmode __p__commode __setusermatherr _amsg_exit _initterm _acmdln exit _XcptFilter _exit _cexit __getmainargs _ismbblead memcpy srand rand malloc strtok strstr free _time64 _localtime64 strcpy strcmp memset strcat strlen _adjust_fdiv _controlfp

kernel32

WriteFile FreeLibrary CreateFileA GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter GetModuleHandleA SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoA InterlockedCompareExchange InterlockedExchange RtlUnwind FindResourceA LoadResource SizeofResource GetTickCount LoadLibraryA GetProcAddress CloseHandle SetFilePointer GetFileSize ReadFile GetModuleFileNameA GetEnvironmentVariableA GetCurrentThread SetThreadPriority SetPriorityClass GetCurrentProcess GetPrivateProfileStringA CreateMutexA GetLastError CreateDirectoryA SetFileAttributesA GetTempFileNameA WinExec Sleep GetSystemDirectoryA CopyFileA CreateProcessA WaitForSingleObject GetShortPathNameA GetTempPathA lstrcpyA lstrcatA DeleteFileA

user32

MessageBoxA GetDesktopWindow wsprintfA

advapi32

RegCreateKeyExA RegQueryValueExA RegOpenKeyExA RegCloseKey RegSetValueExA

shell32

SHGetSpecialFolderPathA ShellExecuteA ShellExecuteExA

Sharing

General

Malware Config

Signatures

File Explorer

cffe77cf0faff802b48c8dfcda7ae6bdef09e1a514a0d64a43113ec02b47dde6

msvcrt

kernel32

user32

advapi32

shell32