2c53ca01340b4cc10484f28abbbd4c7c0e899b0e228de0e298d6a4ddff5e7eb8

Sharing

Copy URL Twitter E-mail

General

Target
2c53ca01340b4cc10484f28abbbd4c7c0e899b0e228de0e298d6a4ddff5e7eb8
Size 1.6MB
Sample230810-1jbgtaba4z
SHA256 2c53ca01340b4cc10484f28abbbd4c7c0e899b0e228de0e298d6a4ddff5e7eb8
MD5 396a9436b717ad83907cae9218f4a5b4
SHA1 f4427723f39d75df0a1884382a9857896899778c
SHA512 7c43f942ea86d89096692e0c25ff0d9338d5c1c8eac5b78431768133cb9e67d10fba808f394dc7b641e077ef93b6456e43dab8a060bae227d087142d4bec2615
SSDEEP 49152:PDD2VSb1+/zSvwpMMMMMMMMbMMMMMMMMmkAm4ihReOt:rD2kbuOvwpMMMMMMMMbMMMMMMMM6m4in
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c53ca01340b4cc10484f28abbbd4c7c0e899b0e228de0e298d6a4ddff5e7eb8

File Explorer

2c53ca01340b4cc10484f28abbbd4c7c0e899b0e228de0e298d6a4ddff5e7eb8

.exe 1.6MB

2c53ca01340b4cc10484f28abbbd4c7c0e899b0e228de0e298d6a4ddff5e7eb8

IMPHASH 45e2e9a3abf9b3de6be6cc290e8a9be3
SHA256 2c53ca01340b4cc10484f28abbbd4c7c0e899b0e228de0e298d6a4ddff5e7eb8
MD5 396a9436b717ad83907cae9218f4a5b4
SHA1 f4427723f39d75df0a1884382a9857896899778c
SHA512 7c43f942ea86d89096692e0c25ff0d9338d5c1c8eac5b78431768133cb9e67d10fba808f394dc7b641e077ef93b6456e43dab8a060bae227d087142d4bec2615
SSDEEP 49152:PDD2VSb1+/zSvwpMMMMMMMMbMMMMMMMMmkAm4ihReOt:rD2kbuOvwpMMMMMMMMbMMMMMMMM6m4in
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

452800

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_AGGRESIVE_WS_TRIM IMAGE_FILE_32BIT_MACHINE

PDB paths

msacm32

acmStreamOpen acmFormatTagEnumW acmStreamClose

mpr

WNetCloseEnum WNetOpenEnumA

kernel32

GetTickCount EnterCriticalSection InitializeCriticalSection GetCommandLineA IsValidCodePage QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime DeleteCriticalSection DeleteFileA DeleteFileW DeviceIoControl LeaveCriticalSection DisconnectNamedPipe GetLocaleInfoA GetProcAddress GetLastError VirtualAlloc HeapAlloc GetOEMCP GetACP GetCPInfo WriteFile HeapFree LoadLibraryA ExitProcess HeapReAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW DisableThreadLibraryCalls VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetFileType GetStdHandle SetHandleCount RtlUnwind GetModuleHandleA GetStartupInfoA GetVersion TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW

user32

wvsprintfA GetDCEx GetDesktopWindow ReleaseCapture wsprintfA wsprintfW

advapi32

RegSetValueExA RegEnumValueA RegEnumKeyA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHFileOperationA SHGetFileInfoA

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

Name

.text

Size

452KB

Virtual Size

451KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls1

Size

4KB

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

752KB

Virtual Size

752KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fms730

Size

399KB

Virtual Size

400KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE