cb8899f49bbe9d2ede35c85fae52c8c1[.]exe

General

Target
cb8899f49bbe9d2ede35c85fae52c8c1.exe
Size 521KB
Sample230713-jldxaagg2y
SHA256 1732053a4bd2bd25d10b29a0e67fccce76df847635fe14a123eb1fae05ee7540
MD5 cb8899f49bbe9d2ede35c85fae52c8c1
SHA1 04ef65c642d78ca80043a3e26e800c3565ca3159
SHA512 45dd914ad920f239816d7b669d97dca0383ecc6a78229c6071739200d8680c01c6c46c387f6f6d840b2252c785639a2218c019f5320195420744eb4fa0f99ab1
SSDEEP 12288:JKFbgfxiiDY95+IUH7wHcpgzPmiNT1TCy:Tfoy6jAUHcvA1TC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb8899f49bbe9d2ede35c85fae52c8c1.exe

File Explorer

cb8899f49bbe9d2ede35c85fae52c8c1.exe

.exe 521KB

cb8899f49bbe9d2ede35c85fae52c8c1.exe

IMPHASH 86c47702e68c17088ae94614621346cc
SHA256 1732053a4bd2bd25d10b29a0e67fccce76df847635fe14a123eb1fae05ee7540
MD5 cb8899f49bbe9d2ede35c85fae52c8c1
SHA1 04ef65c642d78ca80043a3e26e800c3565ca3159
SHA512 45dd914ad920f239816d7b669d97dca0383ecc6a78229c6071739200d8680c01c6c46c387f6f6d840b2252c785639a2218c019f5320195420744eb4fa0f99ab1
SSDEEP 12288:JKFbgfxiiDY95+IUH7wHcpgzPmiNT1TCy:Tfoy6jAUHcvA1TC
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18171

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA GetProfileIntW GetSystemWindowsDirectoryW GetComputerNameW CreateHardLinkA SetTapeParameters GetModuleHandleW GetTickCount GetVolumePathNameW FindResourceExA LoadLibraryW ReadConsoleInputA _hread GetVersionExW EnumSystemCodePagesA DisconnectNamedPipe FlushFileBuffers GetConsoleAliasesW FindFirstFileA OpenMutexW GetLastError SetLastError FindResourceA GetProcAddress BeginUpdateResourceW EnumDateFormatsExA CopyFileA LoadLibraryA LocalAlloc SetCurrentDirectoryW SetProcessWorkingSetSize HeapWalk SetLocaleInfoW CreateMutexA VirtualProtect GetVersionExA GetWindowsDirectoryW FileTimeToLocalFileTime lstrcpyA CloseHandle CreateFileA GetModuleHandleA WriteConsoleW GetConsoleOutputCP lstrcmpiA CreateMutexW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetStartupInfoW HeapFree RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc WideCharToMultiByte SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW SetStdHandle WriteConsoleA

user32

GetMenuBarInfo CharLowerBuffW CharUpperBuffA DdeQueryStringA GetClipboardOwner CharToOemBuffA

advapi32

LogonUserW

Sharing