cc061516b19d5d11dafc91a8f23165b1b5be679db5030f08f2f4777043dec9a9

General

Target
cc061516b19d5d11dafc91a8f23165b1b5be679db5030f08f2f4777043dec9a9
Size 802KB
Sample221211-y4bbfahd59
SHA256 cc061516b19d5d11dafc91a8f23165b1b5be679db5030f08f2f4777043dec9a9
MD5 1f505210cf824c14082e2744d7f03df1
SHA1 cfa1d53d80c4685b2bb13005b49bdb5b18f43a71
SHA512 eeb3469f68bdd5be59c0bdf8dba27a55e8cea2970fa7d2227e0340839ebed3de55a2bed55ce05428b132b9bf709ffebaeafc4a0a12da6502f011b1a569c7d2e5
SSDEEP 12288:Q4MfhHfLuwmH1WaER3kUH6ywOFzZeDT32gizr6gAeT/U0dgtCtg:yfh//mVPI0UbfFzZq32/z2gAssh
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

cc061516b19d5d11dafc91a8f23165b1b5be679db5030f08f2f4777043dec9a9

.exe 802KB

cc061516b19d5d11dafc91a8f23165b1b5be679db5030f08f2f4777043dec9a9

IMPHASH 3e368d902323fe5dbedbd886e52ae82d
SHA256 cc061516b19d5d11dafc91a8f23165b1b5be679db5030f08f2f4777043dec9a9
MD5 1f505210cf824c14082e2744d7f03df1
SHA1 cfa1d53d80c4685b2bb13005b49bdb5b18f43a71
SHA512 eeb3469f68bdd5be59c0bdf8dba27a55e8cea2970fa7d2227e0340839ebed3de55a2bed55ce05428b132b9bf709ffebaeafc4a0a12da6502f011b1a569c7d2e5
SSDEEP 12288:Q4MfhHfLuwmH1WaER3kUH6ywOFzZeDT32gizr6gAeT/U0dgtCtg:yfh//mVPI0UbfFzZq32/z2gAssh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

22996

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MapUserPhysicalPages DeleteVolumeMountPointA EndUpdateResourceW CreateJobObjectW GetSystemDefaultLCID GetModuleHandleW GetTickCount GetConsoleAliasesA GetCalendarInfoW GetConsoleAliasW WriteConsoleW LCMapStringA GetStdHandle GetLastError GetProcAddress GetConsoleAliasExesLengthA EnumSystemCodePagesW CreateMemoryResourceNotification LoadLibraryA WriteConsoleA LocalAlloc CreateTapePartition SetProcessWorkingSetSize SetThreadIdealProcessor OpenJobObjectW FoldStringA FindFirstChangeNotificationA GetVolumeNameForVolumeMountPointW AddConsoleAliasA TlsGetValue VirtualAlloc GetComputerNameA HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetModuleFileNameA WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleOutputCP MultiByteToWideChar SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap ReadFile

advapi32

BackupEventLogW ReportEventW

winhttp

WinHttpCheckPlatform

Sharing

General

Malware Config

Signatures

File Explorer

cc061516b19d5d11dafc91a8f23165b1b5be679db5030f08f2f4777043dec9a9

kernel32

advapi32

winhttp