ff0cb531a602c4cef22ecc18a6cf16f0

General

Target
ff0cb531a602c4cef22ecc18a6cf16f0
Size 453KB
Sample231220-wktbssdbbj
SHA256 b1332797f82f206c8cc7e0061f3d5a35df31bd5f920f5acda288c6869eab2603
MD5 ff0cb531a602c4cef22ecc18a6cf16f0
SHA1 254942caf75abccf05ddacc9e9a35e6cfded7571
SHA512 6acabd528348f68f7dae10c53cf6e1bc4b87ad58d4ae2e5897de430eb0b6a31e95f7d6fff5193cebe3f96ad14a434b266840aef29c00a9d4dae5950f70519965
SSDEEP 12288:FqjbDxJKnJ/mIYbw+wl90AOMcqPq+9NbYp:FSXbK5mI2w+20AO2qv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0cb531a602c4cef22ecc18a6cf16f0

File Explorer

ff0cb531a602c4cef22ecc18a6cf16f0

.exe 453KB

ff0cb531a602c4cef22ecc18a6cf16f0

IMPHASH f67608135ffb289eb5361e495b501ce2
SHA256 b1332797f82f206c8cc7e0061f3d5a35df31bd5f920f5acda288c6869eab2603
MD5 ff0cb531a602c4cef22ecc18a6cf16f0
SHA1 254942caf75abccf05ddacc9e9a35e6cfded7571
SHA512 6acabd528348f68f7dae10c53cf6e1bc4b87ad58d4ae2e5897de430eb0b6a31e95f7d6fff5193cebe3f96ad14a434b266840aef29c00a9d4dae5950f70519965
SSDEEP 12288:FqjbDxJKnJ/mIYbw+wl90AOMcqPq+9NbYp:FSXbK5mI2w+20AO2qv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

241664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstChangeNotificationW SetEndOfFile CancelWaitableTimer AddConsoleAliasW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW GetDriveTypeA GlobalAlloc LoadLibraryW _hread GetCalendarInfoW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA SetConsoleCursorPosition GetModuleFileNameW GetOverlappedResult lstrlenW GetStartupInfoW VerifyVersionInfoW SetCurrentDirectoryA OpenMutexW CreateTimerQueue GetProcAddress GetLongPathNameA SetFirmwareEnvironmentVariableW WriteProfileSectionA SearchPathA GetPrivateProfileStringA LoadLibraryA SetConsoleDisplayMode PostQueuedCompletionStatus GetCommMask AddAtomA SetEnvironmentVariableA GetProcessShutdownParameters QueryMemoryResourceNotification HeapSetInformation FreeEnvironmentStringsW RequestWakeupLatency GetCurrentDirectoryA GetCPInfoExA FindAtomW CloseHandle CreateFileW GetLastError SetVolumeLabelA SetStdHandle GetConsoleMode InterlockedIncrement InterlockedDecrement EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapValidate IsBadReadPtr DeleteFileA GetCommandLineA RtlUnwind RaiseException WideCharToMultiByte LCMapStringW MultiByteToWideChar GetCPInfo InitializeCriticalSectionAndSpinCount HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapCreate GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType WriteFile GetLocaleInfoW IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW GetStringTypeW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID SetFilePointer GetConsoleCP FlushFileBuffers

user32

DrawFrameControl

advapi32

AbortSystemShutdownA

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

ff0cb531a602c4cef22ecc18a6cf16f0

kernel32

user32

advapi32

msimg32

generic