4df0d0404a5e796c73acf6e615539adc

Target
4df0d0404a5e796c73acf6e615539adc
Size 276KB
Sample231219-ssftwsdbcp
SHA256 764e02b8774ce178f7fcf62a72141453274928e89cd44e2f24c56e991de844ae
MD5 4df0d0404a5e796c73acf6e615539adc
SHA1 b0bca187428f51a261f501364260b72fc2f714e3
SHA512 94d0d959072221415b7b30713ed37ca932e1ad7d289c4331cae97c07b83641da1715dee32a7830442e7c7fb7c7e921810eb68fc529ae69ecd6ed5d4472b397e7
SSDEEP 3072:lBBn4KdvxWhD5iBbw0GXn1fuhJinbP/T7G5NUIYvP2ZmCpjD+SzItCiycN8d:JJdp44wn1furUpvRdSzkCKs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4df0d0404a5e796c73acf6e615539adc

File Explorer

4df0d0404a5e796c73acf6e615539adc

.exe 276KB

4df0d0404a5e796c73acf6e615539adc

IMPHASH 13eac9894ad171ba05ccbb9f74dd19d0
SHA256 764e02b8774ce178f7fcf62a72141453274928e89cd44e2f24c56e991de844ae
MD5 4df0d0404a5e796c73acf6e615539adc
SHA1 b0bca187428f51a261f501364260b72fc2f714e3
SHA512 94d0d959072221415b7b30713ed37ca932e1ad7d289c4331cae97c07b83641da1715dee32a7830442e7c7fb7c7e921810eb68fc529ae69ecd6ed5d4472b397e7
SSDEEP 3072:lBBn4KdvxWhD5iBbw0GXn1fuhJinbP/T7G5NUIYvP2ZmCpjD+SzItCiycN8d:JJdp44wn1furUpvRdSzkCKs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33058

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo lstrlenA CopyFileExW GetLocaleInfoA SetWaitableTimer CancelWaitableTimer SetEvent SetCommState LoadLibraryW GetCalendarInfoA GetGeoInfoA ReadFile GetModuleFileNameW CreateActCtxA VirtualUnlock GetStringTypeExA LCMapStringA GetConsoleAliasesW VirtualAlloc HeapUnlock LocalAlloc SetSystemTime GetModuleHandleA lstrcatW OpenEventW FindAtomW CloseHandle CompareStringW CompareStringA GetTimeZoneInformation CreateFileA FlushFileBuffers IsValidLocale EnumSystemLocalesA GetUserDefaultLCID UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep GetProcAddress ExitProcess GetLastError SetConsoleCtrlHandler WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapSize EnterCriticalSection LeaveCriticalSection SetHandleCount GetFileType DeleteCriticalSection SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc SetStdHandle GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA SetEnvironmentVariableA

ole32

CoUninitialize

winhttp

WinHttpCloseHandle WinHttpOpen WinHttpSetDefaultProxyConfiguration

msimg32

TransparentBlt

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

4df0d0404a5e796c73acf6e615539adc

kernel32

ole32

winhttp

msimg32

generic