c45ca496c00650c6272c32794389607d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
c45ca496c00650c6272c32794389607d.exe
Size 40KB
Sample230503-mtds2agb9s
SHA256 637dd01e0c2df40b6e16752dc10bddd8e446b25254499a0d5e56cea62efba73c
MD5 c45ca496c00650c6272c32794389607d
SHA1 06e34d85c7284ff64bd4da46dbd721c60e1104e0
SHA512 3869599141e40e2e3b2121f17c81d5fceb0de2e8f30306b0d65d7a7c7b87a50401a61f2711e39fcdb896a3ebec97ba157ce9ba120af62c22d1a431e726e45363
SSDEEP 768:TQBdkQqjLKdTXPlS5KBwIrIgFXd+bpfU7kLo2Xhmf/3uTE34thUsoki:TQqHK5XPlS5KpD2bpM2pX0n3uTE34ti
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c45ca496c00650c6272c32794389607d.exe

File Explorer

c45ca496c00650c6272c32794389607d.exe

.exe 40KB

c45ca496c00650c6272c32794389607d.exe

IMPHASH 93dfc16ed07ebeb5b405221f10d12c0e
SHA256 637dd01e0c2df40b6e16752dc10bddd8e446b25254499a0d5e56cea62efba73c
MD5 c45ca496c00650c6272c32794389607d
SHA1 06e34d85c7284ff64bd4da46dbd721c60e1104e0
SHA512 3869599141e40e2e3b2121f17c81d5fceb0de2e8f30306b0d65d7a7c7b87a50401a61f2711e39fcdb896a3ebec97ba157ce9ba120af62c22d1a431e726e45363
SSDEEP 768:TQBdkQqjLKdTXPlS5KBwIrIgFXd+bpfU7kLo2Xhmf/3uTE34thUsoki:TQqHK5XPlS5KpD2bpM2pX0n3uTE34ti
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14039

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

PeekMessageW DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW SetDlgItemTextW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW GetDlgItemTextW CharNextA CharPrevW RegisterClassW MessageBoxIndirectW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

GetLastError WaitForSingleObject GetExitCodeProcess RemoveDirectoryW GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW WriteFile MoveFileExW GetSystemDirectoryW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode