cd48383befb4dce49fb855d64f500ca1[.]exe

General

Target
cd48383befb4dce49fb855d64f500ca1.exe
Size 1.2MB
Sample221116-wr35kscc65
SHA256 040aa152e739826874a268f4ffb8be80dd256e7817cdb2c25329d25a5264671e
MD5 cd48383befb4dce49fb855d64f500ca1
SHA1 af506733441826dbd789c972a2d627038c0c80af
SHA512 193aa7aae1f12f70b692e4bf5ac7ce8846256da76cbbdc68c1a9fe5746931cb92196ea1505ed49aab81bd45616eb7811940fbd29a83383ed95dd5f0336a9183f
SSDEEP 24576:jolGO8/6YpXCGf+SK/ftRnMh9+bTLWdaVom4v7FF:j0GL6YpZmSat5LWdNhF
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cd48383befb4dce49fb855d64f500ca1.exe

.exe 1.2MB

cd48383befb4dce49fb855d64f500ca1.exe

IMPHASH 310638d36ec921f029e67a7144e7c280
SHA256 040aa152e739826874a268f4ffb8be80dd256e7817cdb2c25329d25a5264671e
MD5 cd48383befb4dce49fb855d64f500ca1
SHA1 af506733441826dbd789c972a2d627038c0c80af
SHA512 193aa7aae1f12f70b692e4bf5ac7ce8846256da76cbbdc68c1a9fe5746931cb92196ea1505ed49aab81bd45616eb7811940fbd29a83383ed95dd5f0336a9183f
SSDEEP 24576:jolGO8/6YpXCGf+SK/ftRnMh9+bTLWdaVom4v7FF:j0GL6YpZmSat5LWdNhF
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

e7:98:79:2b:ef:fd:cf:38:3c:dd:23:f7:37:8b:1c:87:06:ff:d2:04:c5:c3:02:ac:5b:a2:ce:2e:53:db:a1:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

33885

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEvent GetTickCount GetDllDirectoryW Sleep lstrcmpW GetConsoleAliasesW GetLastError GetProcAddress GetDiskFreeSpaceW FindClose ResetEvent LoadLibraryA LocalAlloc FindNextFileW FreeLibrary lstrcpyW ExpandEnvironmentStringsW CreateFileW CloseHandle HeapSize WriteConsoleW SetStdHandle FlushFileBuffers IsProcessorFeaturePresent LoadLibraryW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW MultiByteToWideChar MoveFileA HeapAlloc DeleteFileA HeapReAlloc GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW HeapCreate HeapFree FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW GetStringTypeW SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind

user32

PostMessageW GetParent IsWindowEnabled GetDC LoadMenuW ReleaseDC GetDlgItem SetWindowLongW GetDesktopWindow LoadBitmapW MessageBoxW

gdi32

GetColorAdjustment

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fikolea

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.trtryns

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

175KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cd48383befb4dce49fb855d64f500ca1.exe

PE Signature issue

kernel32

user32

gdi32