c98dd4894020f76a979d894bd421414c

General

Target
c98dd4894020f76a979d894bd421414c
Size 596KB
Sample240314-za862sed4t
SHA256 12a7d29211e17e0428a596c386cc289fe2a3d02e270f443ed7aa8df490f1b82d
MD5 c98dd4894020f76a979d894bd421414c
SHA1 1edddcca33f0f871829b85f931bd4aedf570849d
SHA512 8c1be33474016ab86cfa2c90b583f91fb994efd0755ac8f4a6b4812e84705bc9846b6037fd0b5c016259f3d80771e3767c2d981ba32afdd7cfe2aab6e46994a8
SSDEEP 12288:EVfeyI5g/eY+WArkJsrVNulWd/WLGteQaTlH1oguxhgHiDh:EVfeyI50ZFskJspN/d/pex5VogU1Dh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c98dd4894020f76a979d894bd421414c

File Explorer

c98dd4894020f76a979d894bd421414c

.dll 596KB

c98dd4894020f76a979d894bd421414c

IMPHASH 576b42b4bf705da072ccc9d4ecff1a77
SHA256 12a7d29211e17e0428a596c386cc289fe2a3d02e270f443ed7aa8df490f1b82d
MD5 c98dd4894020f76a979d894bd421414c
SHA1 1edddcca33f0f871829b85f931bd4aedf570849d
SHA512 8c1be33474016ab86cfa2c90b583f91fb994efd0755ac8f4a6b4812e84705bc9846b6037fd0b5c016259f3d80771e3767c2d981ba32afdd7cfe2aab6e46994a8
SSDEEP 12288:EVfeyI5g/eY+WArkJsrVNulWd/WLGteQaTlH1oguxhgHiDh:EVfeyI50ZFskJspN/d/pex5VogU1Dh
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

455359

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

kernel32

GetLastError HeapFree HeapSize HeapReAlloc HeapAlloc GetProcessHeap lstrlenA lstrcpyA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateThread DeleteCriticalSection lstrlenW LocalFree lstrcpynA lstrcmpA AreFileApisANSI ReadFile TryEnterCriticalSection HeapCreate GetFullPathNameW WriteFile GetDiskFreeSpaceW OutputDebugStringA LockFile SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId SetLastError HeapValidate MultiByteToWideChar GetTempPathA FormatMessageW GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA DeleteFileW CloseHandle GetSystemInfo LoadLibraryW HeapCompact HeapDestroy UnlockFile LockFileEx GetFileSize GetCurrentProcessId SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter VirtualQuery FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle GetStringTypeW GetFileType GetProcAddress LoadLibraryA AddVectoredExceptionHandler Sleep SetFilePointerEx GetModuleHandleA WriteConsoleW DecodePointer UnmapViewOfFile GetTickCount IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW InitializeSListHead GetCurrentProcess TerminateProcess RtlUnwind RaiseException InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA GetACP CompareStringW LCMapStringW GetTimeZoneInformation FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetStdHandle

Sharing

General

Malware Config

Signatures

File Explorer

c98dd4894020f76a979d894bd421414c

version

kernel32

generic