361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104

General

Target
361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104
Size 247KB
Sample231020-cbtresdc5v
SHA256 361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104
MD5 f54b4b2b5332919c3c73fe27472cfeb8
SHA1 2dc50b15adef0e7dacf69ac469cb5c4658f1725c
SHA512 e7597510c6f768622551b09d2992a5fa7627cd3a31a1c57adc4efb6687a66ceb4b790a73239e0f35a70c7401708c272a3468d39d829346a604b3c9b135ec2206
SSDEEP 3072:KdqIXas4LnvtLV8CpEPmFenpbnmF3ey5c1675kA+N00hXMciOY4w+5EdKl:4v4LvtLV8CG+oh23e4c167au0heL/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104

File Explorer

361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104

.exe 247KB

361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104

IMPHASH 0abfd9b4cefcc172c4f8de2d84fe5d40
SHA256 361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104
MD5 f54b4b2b5332919c3c73fe27472cfeb8
SHA1 2dc50b15adef0e7dacf69ac469cb5c4658f1725c
SHA512 e7597510c6f768622551b09d2992a5fa7627cd3a31a1c57adc4efb6687a66ceb4b790a73239e0f35a70c7401708c272a3468d39d829346a604b3c9b135ec2206
SSDEEP 3072:KdqIXas4LnvtLV8CpEPmFenpbnmF3ey5c1675kA+N00hXMciOY4w+5EdKl:4v4LvtLV8CG+oh23e4c167au0heL/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

30287

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe UpdateResourceA DeleteVolumeMountPointA SetConsoleTextAttribute GetCommState GetConsoleAliasA FindCloseChangeNotification CreateHardLinkA GetTickCount GetWindowsDirectoryA GetConsoleAliasExesW GetDateFormatA WideCharToMultiByte LoadLibraryW ReadConsoleInputA FreeConsole GetConsoleAliasExesLengthW EnumSystemCodePagesA GetNamedPipeInfo FileTimeToSystemTime SetComputerNameExW GetVolumePathNameA GetConsoleAliasesW InterlockedExchange FillConsoleOutputCharacterW FindFirstFileW SetLastError BackupRead GetProcAddress VirtualAlloc PeekConsoleInputW RemoveDirectoryA LocalAlloc GetNumberFormatW RemoveDirectoryW FoldStringW GetOEMCP GetModuleHandleA FreeEnvironmentStringsW VirtualProtect SetCalendarInfoA GetWindowsDirectoryW GlobalAddAtomW AddConsoleAliasA SetFileAttributesW CreateFileA WriteConsoleW SetPriorityClass FindResourceA GetLastError GetConsoleOutputCP WriteConsoleA CloseHandle HeapFree GetModuleHandleW Sleep ExitProcess GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapAlloc RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc HeapSize MultiByteToWideChar ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers

user32

LoadMenuA ChangeDisplaySettingsW CharToOemBuffW

gdi32

GetBitmapDimensionEx GetCharABCWidthsFloatA GetCharWidthW

winhttp

WinHttpOpen WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

361184ca4e30982eea5979c15ad388f10f0684f8c42e608273ffee7bbdbed104

kernel32

user32

gdi32

winhttp

generic