cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1

General

Target
cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1
Size 724KB
Sample240125-tbe2psbacj
SHA256 cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1
MD5 39cf448c556a2cd2aa1cb6e6220857e9
SHA1 bd5001edefca0bcef3ec3cec39c999cdf25d2ff8
SHA512 4ff1e1fb3f31abfc41583c92f7db3fc19a71383bed39be3b7c6f9cabab40d575ebaf575bca18d343862ff33e445c2122823bea489b8f90b3ee88a1e81069b1d3
SSDEEP 12288:qlsyXE2GemaPufRhta1ioZ4/H3KsUbTNwHP:qlsyXE2G3aUwZLbTuH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1

File Explorer

cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1

.dll 724KB

cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1

IMPHASH 73c1d65bea5d2931cf14b8c334d4e6d4
SHA256 cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1
MD5 39cf448c556a2cd2aa1cb6e6220857e9
SHA1 bd5001edefca0bcef3ec3cec39c999cdf25d2ff8
SHA512 4ff1e1fb3f31abfc41583c92f7db3fc19a71383bed39be3b7c6f9cabab40d575ebaf575bca18d343862ff33e445c2122823bea489b8f90b3ee88a1e81069b1d3
SSDEEP 12288:qlsyXE2GemaPufRhta1ioZ4/H3KsUbTNwHP:qlsyXE2G3aUwZLbTuH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

471461

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte FreeLibrary GetModuleFileNameA GetModuleHandleExA GetProcAddress LoadLibraryA MultiByteToWideChar CreateFileW CloseHandle InterlockedIncrement InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection Sleep EncodePointer DecodePointer GetStringTypeW RaiseException RtlUnwind HeapAlloc GetLastError HeapFree HeapReAlloc GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW GetCommandLineA GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetCPInfo IsProcessorFeaturePresent WriteFile ExitProcess HeapSize IsDebuggerPresent SetLastError GetProcessHeap OutputDebugStringW LoadLibraryExW LoadLibraryW IsValidCodePage GetACP GetOEMCP InitOnceExecuteOnce GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetModuleHandleW LCMapStringEx FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle

ws2_32

inet_addr

Sharing

General

Malware Config

Signatures

File Explorer

cbc2398a7e8728ad89ee0f01df79f60dec62e7a4aecd71e3856ff2b3bccb7fc1

kernel32

ws2_32

generic