c70a6ffcae2e350250af007cc6384e2c

General

Target
c70a6ffcae2e350250af007cc6384e2c
Size 60KB
Sample240313-2n7aqade68
SHA256 cf3064aba957ea5b1674b8251ab1d339f26c5a475c327ad856446f038da23a9a
MD5 c70a6ffcae2e350250af007cc6384e2c
SHA1 e3c67135a171e6ffa55206cb19125f12fc499556
SHA512 9cb4f6e02e3bf217ac8b29b90c802fa84c50f1bc4a8ce07542b67c8d3ca10b005477f6c26f5a7ece9de5bcee19a9e6f0b15494e22e204c1695f301ed6694a707
SSDEEP 768:HIvm0NFttlB9QXshG+u2P44u0wXxHha5O:ovRFttlBNr3A4u04
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c70a6ffcae2e350250af007cc6384e2c

File Explorer

c70a6ffcae2e350250af007cc6384e2c

.dll 60KB

c70a6ffcae2e350250af007cc6384e2c

IMPHASH d9fdd728780578694a01f4de1db176f3
SHA256 cf3064aba957ea5b1674b8251ab1d339f26c5a475c327ad856446f038da23a9a
MD5 c70a6ffcae2e350250af007cc6384e2c
SHA1 e3c67135a171e6ffa55206cb19125f12fc499556
SHA512 9cb4f6e02e3bf217ac8b29b90c802fa84c50f1bc4a8ce07542b67c8d3ca10b005477f6c26f5a7ece9de5bcee19a9e6f0b15494e22e204c1695f301ed6694a707
SSDEEP 768:HIvm0NFttlB9QXshG+u2P44u0wXxHha5O:ovRFttlBNr3A4u04
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

ws2_32

connect recv closesocket WSACleanup htons gethostbyname socket WSAStartup send

msvcrt

atoi rand strncpy sscanf fopen fseek ftell fgetc printf fread fclose memcpy memset time sprintf strcmp strstr strcat strcpy strtok strtol strlen

kernel32

GetLastError LocalAlloc lstrcmpiA GetCurrentProcess OpenProcess VirtualAllocEx WriteProcessMemory GetModuleHandleA CreateRemoteThread GetVolumeInformationA Sleep SetSystemTime GetSystemTime CloseHandle GetFileSize CreateFileA lstrcpyA lstrlenA WinExec lstrcatA GetSystemDirectoryA DeleteFileA GetPrivateProfileStringA GetPrivateProfileIntA GetModuleFileNameA WritePrivateProfileStringA FreeLibrary GetProcAddress LoadLibraryA WriteFile CreateThread

user32

wsprintfA CharUpperA

advapi32

QueryServiceConfigA ChangeServiceConfigA OpenServiceA OpenSCManagerA CreateServiceA CloseServiceHandle RegQueryValueExA RegEnumKeyA RegOpenKeyExA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegCloseKey OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges

ole32

CoCreateGuid

Sharing

General

Malware Config

Signatures

File Explorer

c70a6ffcae2e350250af007cc6384e2c

urlmon

wininet

ws2_32

msvcrt

kernel32

user32

advapi32

ole32

generic