3C1EF3BD5CDB2F48F81450A8D66B4521[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
3C1EF3BD5CDB2F48F81450A8D66B4521.exe
Size 1.0MB
Sample240108-txhdysece9
SHA256 435a12ab59bb78ad797f1f9b4b2fad50799bc217e93669bf543540b358a5dcdc
MD5 3c1ef3bd5cdb2f48f81450a8d66b4521
SHA1 52852cfdb69a11e9380fc9e001213982db3ba7af
SHA512 34f990d15be83b476e1684c6c6467fdc92e6117692803cf50e33821ac1ebdb3d9d81e13fab8f04bfc78d26fe2d476d8b87cc27a60b27988ec9a5e0a5ae0312c1
SSDEEP 24576:DlR3W+VUl+iJyv4cNENUkGIO3kaCkspl2L56:Dl0+Vi+iAhKNmVC1GL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3C1EF3BD5CDB2F48F81450A8D66B4521.exe

File Explorer

3C1EF3BD5CDB2F48F81450A8D66B4521.exe

.exe 1.0MB

3C1EF3BD5CDB2F48F81450A8D66B4521.exe

IMPHASH 05ef62e22f17f56d2b9e3d053675fcd5
SHA256 435a12ab59bb78ad797f1f9b4b2fad50799bc217e93669bf543540b358a5dcdc
MD5 3c1ef3bd5cdb2f48f81450a8d66b4521
SHA1 52852cfdb69a11e9380fc9e001213982db3ba7af
SHA512 34f990d15be83b476e1684c6c6467fdc92e6117692803cf50e33821ac1ebdb3d9d81e13fab8f04bfc78d26fe2d476d8b87cc27a60b27988ec9a5e0a5ae0312c1
SSDEEP 24576:DlR3W+VUl+iJyv4cNENUkGIO3kaCkspl2L56:Dl0+Vi+iAhKNmVC1GL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

244676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetCommandLineW GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetProcessHeap CreateFileA SetEnvironmentVariableA GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStdHandle VirtualQuery FindResourceW GetSystemInfo VirtualAlloc VirtualProtect HeapReAlloc HeapSize ExitProcess RaiseException RtlUnwind HeapFree HeapAlloc GetSystemTimeAsFileTime IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW GetFileSizeEx SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime CreateFileW GetShortPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile lstrcmpiW GetThreadLocale GetStringTypeExW MoveFileW GetCurrentDirectoryW lstrlenA InterlockedIncrement GetModuleHandleA TlsFree LocalReAlloc TlsSetValue TlsAlloc GlobalHandle GlobalReAlloc TlsGetValue LocalAlloc FormatMessageW LocalFree GlobalFlags EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection MulDiv GetDiskFreeSpaceW GetFullPathNameW GetTempFileNameW GetFileTime SetFileTime GetFileAttributesW GetTickCount CloseHandle GlobalFree GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GlobalAlloc FreeResource GetCurrentThreadId GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW LoadLibraryA lstrcmpW MultiByteToWideChar GetVersionExA lstrlenW GlobalLock GlobalUnlock GetCurrentProcessId GetModuleHandleW GlobalGetAtomNameW GlobalAddAtomW GetLastError SetLastError WideCharToMultiByte DeleteFileW LockResource GetProcAddress GetModuleFileNameW SizeofResource Sleep LoadLibraryW CreateDirectoryW InterlockedDecrement LoadResource FreeLibrary WriteConsoleA

user32

CopyAcceleratorTableW CharNextW CharUpperW DestroyIcon SetCapture LockWindowUpdate GetDCEx WindowFromPoint KillTimer SetTimer EndPaint BeginPaint GetWindowDC GrayStringW DrawTextExW DrawTextW TabbedTextOutW SystemParametersInfoW GetMenuItemInfoW InflateRect GetMenuStringW InsertMenuW RemoveMenu GetSysColorBrush FillRect LoadCursorW DestroyCursor SetRect RegisterClipboardFormatW CreateDialogIndirectParamW GetNextDlgTabItem EndDialog GetMessageW TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect ShowOwnedPopups PostQuitMessage GetDC ReleaseDC IsZoomed SetParent GetSystemMenu AppendMenuW DeleteMenu IsRectEmpty MoveWindow SetWindowTextW IsDialogMessageW SetDlgItemTextW RedrawWindow TranslateMDISysAccel DrawMenuBar DefMDIChildProcW DefFrameProcW SendDlgItemMessageW SendDlgItemMessageA IsChild SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW GetPropW RemovePropW GetWindowTextLengthW GetWindowTextW GetForegroundWindow DispatchMessageW BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar GetClientRect CreateWindowExW GetClassInfoExW RegisterClassW AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo PtInRect DefWindowProcW CallWindowProcW SystemParametersInfoA GetWindowPlacement GetWindowRect GetSystemMetrics MessageBoxW EnableWindow UpdateWindow CheckMenuItem EnableMenuItem GetClassNameW GetSysColor UnpackDDElParam ReuseDDElParam LoadMenuW DestroyMenu WinHelpW SetWindowPos SetFocus GetWindowThreadProcessId GetActiveWindow IsWindowEnabled EqualRect GetDlgItem GetTabbedTextExtentA CreateMenu SetWindowLongW GetDlgCtrlID SetWindowRgn DrawIcon PostThreadMessageW MessageBeep GetNextDlgGroupItem RegisterWindowMessageW InvalidateRgn GetMenuState ModifyMenuW SendMessageW GetParent GetFocus LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps TranslateAcceleratorW IsWindow GetWindowLongW ShowWindow GetWindow GetDesktopWindow SetMenu PostMessageW BringWindowToTop GetLastActivePopup GetMenu CopyRect SetRectEmpty OffsetRect IntersectRect GetClassInfoW CreatePopupMenu GetMenuItemCount GetMenuItemID GetSubMenu InsertMenuItemW IsIconic InvalidateRect IsWindowVisible SetActiveWindow LoadAcceleratorsW ReleaseCapture GetCapture PeekMessageW SetCursor LoadIconW GetKeyState ClientToScreen

gdi32

TextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ExtSelectClipRgn CreatePatternBrush RectVisible CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode GetBkColor GetTextColor GetRgnBox CreateEllipticRgn LPtoDP Ellipse GetNearestColor GetBkMode GetPolyFillMode GetROP2 GetStretchBltMode GetTextAlign GetTextFaceW GetTextExtentPoint32A GetWindowOrgEx GetPixel PtVisible GetWindowExtEx GetViewportExtEx CreateRectRgn SelectClipRgn SetTextAlign MoveToEx LineTo CreateSolidBrush CreateBitmap ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC ExtTextOutW BitBlt CreateFontIndirectW CreateDCW EndDoc AbortDoc SetAbortProc EndPage StartPage StartDocW GetStockObject PatBlt Rectangle DPtoLP GetViewportOrgEx GetDeviceCaps CreatePen StretchDIBits DeleteDC CreateFontW GetCharWidthW DeleteObject GetTextExtentPoint32W GetTextMetricsW SelectObject GetObjectW SetBkColor SetTextColor GetClipBox CreateCompatibleDC CreateCompatibleBitmap IntersectClipRect

comdlg32

GetFileTitleW

winspool.drv

GetJobW DocumentPropertiesW ClosePrinter OpenPrinterW

advapi32

RegCreateKeyExW RegCreateKeyW RegSetValueW GetFileSecurityW SetFileSecurityW RegDeleteValueW RegSetValueExW RegCloseKey RegQueryValueW RegOpenKeyW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW

shell32

ShellExecuteW DragQueryFileW ExtractIconW SHGetFileInfoW DragFinish

comctl32

InitCommonControlsEx

shlwapi

PathIsDirectoryW PathFindFileNameW PathStripToRootW PathIsUNCW PathFileExistsW PathFindExtensionW PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

OleCreateMenuDescriptor IsAccelerator OleTranslateAccelerator CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree OleInitialize CoFreeUnusedLibraries OleUninitialize CLSIDFromString CLSIDFromProgID CoInitializeEx CoInitialize CoUninitialize CoCreateInstance OleDestroyMenuDescriptor

oleaut32

SysFreeString SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen OleCreateFontIndirect VariantTimeToSystemTime SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy