cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005

General

Target
cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005
Size 167KB
Sample240305-tweaxaca64
SHA256 cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005
MD5 02aff2da644ffa8004ed78eb8ae9bb4b
SHA1 f75cbcc1058e86be7cd1f60c38fddc3210e2e69b
SHA512 d69146019a33388fcefb2ad2490f8aa2e704631ffef413697f6c77dbd47f75b89063219f2ee23e26521e8d0996b41c2817ba0d19606ec2bb73f0e5b9a25ff7cf
SSDEEP 1536:6nN5gRA2recJUq15KwrRr4Pgw95Vum2ZVb0BOY472s9L5RutxgbQC7rH1NzHcVcg:oCRGEfo95JdBOhhzEtKND1NjcVcLj66
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005

File Explorer

cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005

.exe 167KB

cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005

IMPHASH e0587069aceb4235bfa0b2d2c50daac0
SHA256 cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005
MD5 02aff2da644ffa8004ed78eb8ae9bb4b
SHA1 f75cbcc1058e86be7cd1f60c38fddc3210e2e69b
SHA512 d69146019a33388fcefb2ad2490f8aa2e704631ffef413697f6c77dbd47f75b89063219f2ee23e26521e8d0996b41c2817ba0d19606ec2bb73f0e5b9a25ff7cf
SSDEEP 1536:6nN5gRA2recJUq15KwrRr4Pgw95Vum2ZVb0BOY472s9L5RutxgbQC7rH1NzHcVcg:oCRGEfo95JdBOhhzEtKND1NjcVcLj66
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA HeapAlloc GlobalAddAtomA GetCurrentActCtx CreateJobObjectW GetSystemDefaultLCID FreeEnvironmentStringsA CreateNamedPipeW GetProcessHeap TzSpecificLocalTimeToSystemTime WideCharToMultiByte LoadLibraryW FatalAppExitW GetFileAttributesA ReplaceFileW InterlockedExchange GetStdHandle GetConsoleAliasExesLengthA SetLastError LoadLibraryA LocalAlloc GetFileType AddAtomW GetModuleFileNameA lstrcatW BuildCommDCBA VirtualProtect ReleaseMutex FileTimeToLocalFileTime DeleteTimerQueueTimer CreateFileW GetCurrentDirectoryW MoveFileExA GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind IsProcessorFeaturePresent HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle

user32

GetClassLongW LoadIconW SetKeyboardState

gdi32

GetCharWidth32W

Sharing

General

Malware Config

Signatures

File Explorer

cdcbc2f7add04bb6b05afa81f231c9beb7cc612590fc038e97641d1b8134a005

kernel32

user32

gdi32

generic