c4cfd5300fef3f2dd6857d34734a6fd6

General

Target
c4cfd5300fef3f2dd6857d34734a6fd6
Size 201KB
Sample240313-dknr7sdc63
SHA256 94f8df3b1fe7da98f6cea66de08e1d5bca079c8bf8d634d031cc35eb444b15b8
MD5 c4cfd5300fef3f2dd6857d34734a6fd6
SHA1 f4c1d27e2660f2b134cdbc5cce4bd04f50c55c57
SHA512 8155ce6f77ab4d36cdf80b5ea5b1fbcb5ee9d3f6647b0a3210c144403c571459ef05423fdc93fc535b39b5314cb655ae4b0328aafafa12234009413096c51cd0
SSDEEP 3072:SGM0TNvWVyuT+Ao6a5HSrXpgJQKtOgMRZafD4UA1b:SGHsIopO8bEcxb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4cfd5300fef3f2dd6857d34734a6fd6

File Explorer

c4cfd5300fef3f2dd6857d34734a6fd6

.exe 201KB

c4cfd5300fef3f2dd6857d34734a6fd6

IMPHASH 3bdc58d7d3add14fdfc74404aa032a2d
SHA256 94f8df3b1fe7da98f6cea66de08e1d5bca079c8bf8d634d031cc35eb444b15b8
MD5 c4cfd5300fef3f2dd6857d34734a6fd6
SHA1 f4c1d27e2660f2b134cdbc5cce4bd04f50c55c57
SHA512 8155ce6f77ab4d36cdf80b5ea5b1fbcb5ee9d3f6647b0a3210c144403c571459ef05423fdc93fc535b39b5314cb655ae4b0328aafafa12234009413096c51cd0
SSDEEP 3072:SGM0TNvWVyuT+Ao6a5HSrXpgJQKtOgMRZafD4UA1b:SGHsIopO8bEcxb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\rus1\jofiwomu\fijuvegapes\xovud88\wusehaxuwo.pdb

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW GetSystemDefaultLCID GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA SetVolumeMountPointA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA lstrcpynW SetConsoleCursorPosition GetMailslotInfo ReadFile CreateTimerQueue GetTimeZoneInformation lstrcatA lstrlenW GetConsoleOutputCP InterlockedExchange FillConsoleOutputCharacterW GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW ResetEvent GetLocalTime LoadLibraryA WriteConsoleA LocalAlloc BuildCommDCBAndTimeoutsW SetFileApisToANSI GetOEMCP HeapSetInformation GetConsoleTitleW GetCPInfoExA ReleaseMutex FindFirstVolumeW DeleteTimerQueueTimer GetCurrentProcessId GetConsoleProcessList GetModuleFileNameW LocalUnlock CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleW SetStdHandle

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

c4cfd5300fef3f2dd6857d34734a6fd6

kernel32

user32

generic