c3c559e832052bbf33f52f6f8b0ff086

General

Target
c3c559e832052bbf33f52f6f8b0ff086
Size 701KB
Sample240312-tgrmpafb85
SHA256 838edfe6cbf7b8fb1f0d3d99535f15ef22b651fa82a9f31a50c3cae435a0af0c
MD5 c3c559e832052bbf33f52f6f8b0ff086
SHA1 23477b75572d17b1d47b9670862aa174fb55d166
SHA512 2a1e3e9676b103d23947b2271059f59f0bd71559071805f8650c6a27168016cff791ec3c7f2102740b1e1b9a6c5f34775a9a58d2ae3215f9bf386827d9da4583
SSDEEP 12288:2mSxZQAOMrb0dAmfaRyCeBroJrL4ydQGgjSRClCgABPAi:2mPAOMcd2y5Z6rL4v59QBPA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3c559e832052bbf33f52f6f8b0ff086

File Explorer

c3c559e832052bbf33f52f6f8b0ff086

.exe 701KB

c3c559e832052bbf33f52f6f8b0ff086

IMPHASH a06df199bc5c29ff1f7c13754059d5f1
SHA256 838edfe6cbf7b8fb1f0d3d99535f15ef22b651fa82a9f31a50c3cae435a0af0c
MD5 c3c559e832052bbf33f52f6f8b0ff086
SHA1 23477b75572d17b1d47b9670862aa174fb55d166
SHA512 2a1e3e9676b103d23947b2271059f59f0bd71559071805f8650c6a27168016cff791ec3c7f2102740b1e1b9a6c5f34775a9a58d2ae3215f9bf386827d9da4583
SSDEEP 12288:2mSxZQAOMrb0dAmfaRyCeBroJrL4ydQGgjSRClCgABPAi:2mPAOMcd2y5Z6rL4v59QBPA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

531751

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cexududik41\b.pdb

kernel32

GetConsoleAliasW InterlockedPopEntrySList GetConsoleDisplayMode CreateConsoleScreenBuffer GetConsoleCP VerifyVersionInfoA WriteConsoleA SetLastError CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionW EnumDateFormatsExA GetCurrentProcessId LoadLibraryA IsDebuggerPresent SetConsoleCP FindFirstVolumeW WriteFile BuildCommDCBW VerLanguageNameA AreFileApisANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW SetFilePointer LoadLibraryExA CopyFileW ReadConsoleA ActivateActCtx AddRefActCtx HeapLock CreateActCtxW ReadConsoleOutputA GetProcessHeaps GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA HeapAlloc UnmapViewOfFile GetAtomNameA HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW SetProcessAffinityMask WaitForSingleObject SetSystemPowerState VerifyVersionInfoW WriteConsoleOutputCharacterW SetTimeZoneInformation GetMailslotInfo GetCPInfoExA SetEnvironmentVariableA GetFileAttributesExA GetComputerNameW CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA CreateFileA GetConsoleAliasesLengthA DnsHostnameToComputerNameA EnterCriticalSection InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapFree TerminateProcess GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW

user32

RealChildWindowFromPoint GetAltTabInfoA

advapi32

AdjustTokenGroups BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

c3c559e832052bbf33f52f6f8b0ff086

kernel32

user32

advapi32

generic