cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550

General

Target
cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550
Size 397KB
Sample230804-srlnrada81
SHA256 cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550
MD5 8be443c782672be0a7a927d1b89f6408
SHA1 6dc62bc6947124d955a9301428808f408bed7f69
SHA512 d79eee8cf64702c27bb463651b49bec9dd414f0465b29edf09a70cf9214f0f84ec4d54164ff27779bf647d6c0dd87a1da8abfdde07e2adffc3a48f334a83ac1d
SSDEEP 6144:3ztz+pkxdf3MWHO6/SmQku6cIkUvcMXSiJzVThxE2P77hRBhzkh:3z5+pkxl3w6/rlcMXHHLnnhLhz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550

File Explorer

cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550

.exe 397KB

cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550

IMPHASH c3ed73f54315cf25b6990ff31b84dc51
SHA256 cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550
MD5 8be443c782672be0a7a927d1b89f6408
SHA1 6dc62bc6947124d955a9301428808f408bed7f69
SHA512 d79eee8cf64702c27bb463651b49bec9dd414f0465b29edf09a70cf9214f0f84ec4d54164ff27779bf647d6c0dd87a1da8abfdde07e2adffc3a48f334a83ac1d
SSDEEP 6144:3ztz+pkxdf3MWHO6/SmQku6cIkUvcMXSiJzVThxE2P77hRBhzkh:3z5+pkxl3w6/rlcMXHHLnnhLhz
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22621

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW SetInformationJobObject GetConsoleAliasExesA ConvertThreadToFiber GetConsoleAliasExesLengthA BuildCommDCBAndTimeoutsA InterlockedIncrement MoveFileExW GetConsoleAliasA GetSystemWindowsDirectoryW HeapFree GetTimeFormatA FlushConsoleInputBuffer OpenSemaphoreA GetSystemDefaultLCID _lclose GetModuleHandleW VirtualFree GenerateConsoleCtrlEvent GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA ReadConsoleOutputA WaitNamedPipeW EnumTimeFormatsW GetUserDefaultLangID GetCommandLineA GetDriveTypeA GetPrivateProfileIntA GetSystemDirectoryW SetFileShortNameW LoadLibraryW _hread GetPrivateProfileStructW GetCalendarInfoA DeleteVolumeMountPointW GetFileAttributesA WritePrivateProfileSectionW SetProcessAffinityMask CreateMailslotW GetNamedPipeHandleStateW InterlockedExchange GetHandleInformation GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW SetLastError GetProcAddress BackupWrite MoveFileW SetComputerNameA OpenWaitableTimerA OpenMutexA InterlockedExchangeAdd LocalAlloc GetFileType AddAtomW SetCurrentDirectoryW GetProfileStringA GlobalGetAtomNameW FindNextFileA CreateIoCompletionPort GetModuleHandleA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW PeekConsoleInputA FindFirstVolumeA ReadConsoleInputW LocalSize GetVolumeNameForVolumeMountPointW DeleteFileW ReadConsoleOutputCharacterW OpenFileMappingA EnumSystemLocalesW HeapReAlloc GetCommandLineW GetComputerNameA GetStartupInfoW ExitProcess InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer HeapAlloc DeleteFileA HeapSetInformation RaiseException RtlUnwind IsProcessorFeaturePresent HeapCreate WriteFile GetStdHandle GetModuleFileNameW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage GetStringTypeW MultiByteToWideChar LCMapStringW

user32

CharUpperA

gdi32

GetTextFaceA

advapi32

AccessCheckByTypeResultList

Sharing

General

Malware Config

Signatures

File Explorer

cbf1a81000539962cc686ae34114ba3424f7fa408707ad39721a40b267df5550

kernel32

user32

gdi32

advapi32