0c4ba43d77c2119dacbf3a21baaf0f63

General

Target
0c4ba43d77c2119dacbf3a21baaf0f63
Size 312KB
Sample231230-dfswcsgabn
SHA256 05e86f566ec58f1e0afbeca09b7fc686acb55dd21d5ca2fefbf1d327dd0f4751
MD5 0c4ba43d77c2119dacbf3a21baaf0f63
SHA1 8a3ccbd41fba2725fdbf7501e3618a73d9f668c4
SHA512 6efa21f59b6dfb62890413d65fcd098ecb05224d1a4aefb321369581c1e2311bd5f17e332c53703dc4602b12ab4b85203b727b67886e459e63266cb29dc1040e
SSDEEP 3072:zwbqks+CRoRrxK00jN/wfLERu8XcN0K8XL/2qQdpt8PLcgcW9U004NOFVqDlEQZA:zweks+CRO0mfLL8vHzstcF93BYf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4ba43d77c2119dacbf3a21baaf0f63

File Explorer

0c4ba43d77c2119dacbf3a21baaf0f63

.exe 312KB

0c4ba43d77c2119dacbf3a21baaf0f63

IMPHASH 872eec4dc671270dd40ad40c1873151e
SHA256 05e86f566ec58f1e0afbeca09b7fc686acb55dd21d5ca2fefbf1d327dd0f4751
MD5 0c4ba43d77c2119dacbf3a21baaf0f63
SHA1 8a3ccbd41fba2725fdbf7501e3618a73d9f668c4
SHA512 6efa21f59b6dfb62890413d65fcd098ecb05224d1a4aefb321369581c1e2311bd5f17e332c53703dc4602b12ab4b85203b727b67886e459e63266cb29dc1040e
SSDEEP 3072:zwbqks+CRoRrxK00jN/wfLERu8XcN0K8XL/2qQdpt8PLcgcW9U004NOFVqDlEQZA:zweks+CRO0mfLL8vHzstcF93BYf
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnmapViewOfFile FindResourceW LoadResource SizeofResource CreateFileW MapViewOfFile CreateFileMappingW LockResource CloseHandle GetModuleHandleW GetTempPathW GetTempFileNameW GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DecodePointer EncodePointer GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind LoadLibraryW HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW GetStringTypeW IsProcessorFeaturePresent ReadFile HeapSize WriteConsoleW SetFilePointer SetStdHandle

advapi32

RegOpenKeyExW

mscoree

CorBindToRuntimeEx

Sharing

General

Malware Config

Signatures

File Explorer

0c4ba43d77c2119dacbf3a21baaf0f63

kernel32

advapi32

mscoree

generic