4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb

General

Target
4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb
Size 408KB
Sample230802-yzf15ahf97
SHA256 4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb
MD5 3ca71348edb8c6926423ba490ce62f50
SHA1 27fb045d37237e11e4ff8e4630935822ad173e1d
SHA512 f842edfc8c28fd01300dd88c012e2a484bcdaaa626502ebcd7d86d0f2934ef9b165f424eed735ddf14cf167a04fcfe21b72401b68a7b163f2a10d9afc9873f3f
SSDEEP 6144:CCQF0M311JdLEeCmpAi2dNQsUbhNDXQTwhwj7V:C93FrdLImpAiUNQschtAPjZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb

File Explorer

4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb

.exe 408KB

4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb

IMPHASH b3bda54228fe75972cc3167bc9b751d7
SHA256 4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb
MD5 3ca71348edb8c6926423ba490ce62f50
SHA1 27fb045d37237e11e4ff8e4630935822ad173e1d
SHA512 f842edfc8c28fd01300dd88c012e2a484bcdaaa626502ebcd7d86d0f2934ef9b165f424eed735ddf14cf167a04fcfe21b72401b68a7b163f2a10d9afc9873f3f
SSDEEP 6144:CCQF0M311JdLEeCmpAi2dNQsUbhNDXQTwhwj7V:C93FrdLImpAiUNQschtAPjZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21353

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess GetCommandLineW SetInformationJobObject GetConsoleAliasExesA ConvertThreadToFiber GetConsoleAliasExesLengthA DeleteVolumeMountPointA MoveFileExW InterlockedDecrement GetSystemWindowsDirectoryW SetHandleInformation GetProfileStringW GetComputerNameW GetTimeFormatA FlushConsoleInputBuffer OpenSemaphoreA GetSystemDefaultLCID FreeEnvironmentStringsA _lclose _lcreat GetModuleHandleW GetConsoleAliasesLengthA GetNumberFormatA ReadConsoleOutputA WaitNamedPipeW EnumTimeFormatsW GetUserDefaultLangID GetCommandLineA GetDriveTypeA GlobalAlloc GetPrivateProfileIntA GetSystemDirectoryW LoadLibraryW ReadConsoleInputA _hread GetCalendarInfoW GetConsoleAliasW IsDBCSLeadByte GetStartupInfoW CreateMailslotW GetNamedPipeHandleStateW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress HeapSize BackupWrite MoveFileW SetComputerNameA OpenMutexA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc GetFileType MoveFileA BuildCommDCBAndTimeoutsW SetConsoleCtrlHandler AddAtomW GlobalGetAtomNameW GetPrivateProfileStructA FindNextFileA CreateIoCompletionPort GetModuleHandleA OpenFileMappingW GetProcessAffinityMask FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetConsoleCursorInfo PeekConsoleInputA FindFirstVolumeA SetFileShortNameA ReadConsoleInputW LocalSize GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW DeleteFileW ReadConsoleOutputCharacterW EnumSystemLocalesW CloseHandle ReadFile WriteConsoleW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapFree HeapAlloc DeleteFileA HeapSetInformation RtlUnwind HeapCreate WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId RaiseException GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar IsProcessorFeaturePresent SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapReAlloc LCMapStringW CreateFileW

user32

CharUpperBuffA CharUpperA

Sharing

General

Malware Config

Signatures

File Explorer

4ccc7f04823d8d6e65ebda49f53727bf0393d08939a7f0276d412889559836bb

kernel32

user32