cddadee5d5d100852814553a3416683a5f4fc4478cde8a301ef32a474de22847

Sharing

Copy URL Twitter E-mail

General

Target
cddadee5d5d100852814553a3416683a5f4fc4478cde8a301ef32a474de22847
Size 1.4MB
Sample230823-ap437saa51
SHA256 cddadee5d5d100852814553a3416683a5f4fc4478cde8a301ef32a474de22847
MD5 7ca796d8be11773cac10ebe9d081999e
SHA1 0dd75f089ae93f107de599b46ff63edd191c8535
SHA512 934edbfcaa5735c89fc7a6d1b8c396b07cec3e1df35ce7055f96ec189d0c64cf8235c0fd0a66a049a00bfa56453523638b0a1e08f867e6734fd9ec0c32c90af4
SSDEEP 24576:OyAQ1CwOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:OhfHPkVOBTK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cddadee5d5d100852814553a3416683a5f4fc4478cde8a301ef32a474de22847

File Explorer

cddadee5d5d100852814553a3416683a5f4fc4478cde8a301ef32a474de22847

.exe 1.4MB

cddadee5d5d100852814553a3416683a5f4fc4478cde8a301ef32a474de22847

IMPHASH c16d6df362fc2fd4753013ff173b20c7
SHA256 cddadee5d5d100852814553a3416683a5f4fc4478cde8a301ef32a474de22847
MD5 7ca796d8be11773cac10ebe9d081999e
SHA1 0dd75f089ae93f107de599b46ff63edd191c8535
SHA512 934edbfcaa5735c89fc7a6d1b8c396b07cec3e1df35ce7055f96ec189d0c64cf8235c0fd0a66a049a00bfa56453523638b0a1e08f867e6734fd9ec0c32c90af4
SSDEEP 24576:OyAQ1CwOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:OhfHPkVOBTK
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43533

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind RaiseException GetStartupInfoA GetCommandLineA TerminateProcess HeapSize GetACP GetTimeZoneInformation SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileTime GetFileType GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate IsBadWritePtr LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetFileSize GetFileAttributesA GetProfileStringA FormatMessageA GetShortPathNameA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GetLastError WritePrivateProfileStringA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc lstrcpynA lstrlenW MulDiv SetLastError MultiByteToWideChar WideCharToMultiByte InterlockedDecrement GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA lstrlenA GetTickCount InterlockedIncrement GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CloseHandle GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId ExitProcess IsBadReadPtr LoadLibraryA GetProcAddress VirtualProtect VirtualAlloc FreeLibrary VirtualFree HeapReAlloc HeapAlloc GetProcessHeap GetStdHandle HeapFree

user32

CharNextA CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep InvalidateRect CharUpperA InflateRect SetFocus AdjustWindowRectEx ScreenToClient CopyRect GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime PostThreadMessageA GetForegroundWindow GetClassNameA SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId RegisterClipboardFormatA EndDialog SetActiveWindow IsWindow DestroyWindow GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos LoadIconA SendMessageA AppendMenuA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor PostQuitMessage PostMessageA EnableWindow IsIconic GetSystemMetrics DestroyIcon GetSysColorBrush GetMessagePos GetClientRect DrawIcon IsWindowUnicode GetSystemMenu GetDesktopWindow LoadCursorA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen DestroyMenu LoadStringA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA GetSysColor UpdateWindow CreateDialogIndirectParamA PtInRect SendDlgItemMessageA SetForegroundWindow MapWindowPoints

gdi32

SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect DeleteObject GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt SetBkMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox CreateDIBitmap GetTextExtentPointA BitBlt CreateCompatibleDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegQueryValueA RegSetValueA RegOpenKeyA RegCloseKey RegSetValueExA RegOpenKeyExA RegCreateKeyExA

shell32

ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

CoTaskMemAlloc CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes OleIsCurrentClipboard OleFlushClipboard CoGetClassObject CoRegisterMessageFilter CoDisconnectObject StringFromCLSID CoTaskMemFree CLSIDFromString CLSIDFromProgID CoFreeUnusedLibraries OleUninitialize OleInitialize CoRevokeClassObject CoRegisterClassObject

olepro32

ord253

oleaut32

SysAllocStringLen SysFreeString VariantCopy VariantClear VariantChangeType SysAllocString VariantTimeToSystemTime SysStringLen SysAllocStringByteLen LoadTypeLi SysStringByteLen