020cc93b4f38fe2ad849ef7be56b5178

General

Target
020cc93b4f38fe2ad849ef7be56b5178
Size 617KB
Sample231229-yd3b8sdcfj
SHA256 8d183c1ce0b2240386e0bc2d9da1f27de356a9d2e56122f36b3c96b9a0113ce2
MD5 020cc93b4f38fe2ad849ef7be56b5178
SHA1 ddf5194235eb22fb0ca6b5fcf3730f532de765b0
SHA512 826a18f383cff70ee4232c1765eb907c38376c4994cae3b57e57e95db90c745eeecd4fd2a2608103223dc8590a6f07da0f0ab7557c4bbe4b2285773b255d3ad0
SSDEEP 12288:YNgraW9ZUFJ6DDcQ1mS88Xy7Z6emWHJ7LzImhrxHyzE:Y+9fDcQ/smiJfzImh9Hy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020cc93b4f38fe2ad849ef7be56b5178

File Explorer

020cc93b4f38fe2ad849ef7be56b5178

.exe 617KB

020cc93b4f38fe2ad849ef7be56b5178

IMPHASH a9a00e66a66c6b808311b287d5febd2b
SHA256 8d183c1ce0b2240386e0bc2d9da1f27de356a9d2e56122f36b3c96b9a0113ce2
MD5 020cc93b4f38fe2ad849ef7be56b5178
SHA1 ddf5194235eb22fb0ca6b5fcf3730f532de765b0
SHA512 826a18f383cff70ee4232c1765eb907c38376c4994cae3b57e57e95db90c745eeecd4fd2a2608103223dc8590a6f07da0f0ab7557c4bbe4b2285773b255d3ad0
SSDEEP 12288:YNgraW9ZUFJ6DDcQ1mS88Xy7Z6emWHJ7LzImhrxHyzE:Y+9fDcQ/smiJfzImh9Hy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

429863

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateActCtxW ReadConsoleInputA InterlockedPopEntrySList SetConsoleDisplayMode CreateConsoleScreenBuffer GetConsoleCP VerifyVersionInfoA CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionW EnumDateFormatsExA GetCurrentProcessId LoadLibraryA IsDebuggerPresent SetConsoleCP FindFirstVolumeA WriteFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW SetFilePointer LoadLibraryExW CopyFileW ReadConsoleA ActivateActCtx GetConsoleAliasesLengthA HeapLock DnsHostnameToComputerNameA ReadConsoleOutputA GetProcessHeaps GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA HeapAlloc UnmapViewOfFile GetAtomNameA HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW SetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoW WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameW CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA CloseHandle AddRefActCtx EnterCriticalSection InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapReAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

advapi32

AdjustTokenGroups

Sharing

General

Malware Config

Signatures

File Explorer

020cc93b4f38fe2ad849ef7be56b5178

kernel32

user32

advapi32

generic