ca66c37ec8d166a9d1623a960e8e6e5d

General

Target
ca66c37ec8d166a9d1623a960e8e6e5d
Size 116KB
Sample240315-ebb8gshf72
SHA256 2682b8ac34d2c4b2b3f5904c333d3062d2764efa7f3ca13578c8ff9038302704
MD5 ca66c37ec8d166a9d1623a960e8e6e5d
SHA1 5e9f54877bf6114482cf3ac862c66ba6b078fb5f
SHA512 56215040dfc6d56de4f4b4f4cb00cca6a66a1ae8e3eb53e04ef4c5895b8c0c8f2e1a3b365493b8eb1cfc8cd3aab05775b2e418ae3d439979f43ae776dcdd5470
SSDEEP 1536:RwZY0dRogymSJ7nra/ZDfgmy13mOyasnbP9Eo73Yv:qndRog6Va/ZDBqAD9EoTYv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca66c37ec8d166a9d1623a960e8e6e5d

File Explorer

ca66c37ec8d166a9d1623a960e8e6e5d

.exe 116KB

ca66c37ec8d166a9d1623a960e8e6e5d

IMPHASH 80d79bda2b01a18b55f0002e19ccb755
SHA256 2682b8ac34d2c4b2b3f5904c333d3062d2764efa7f3ca13578c8ff9038302704
MD5 ca66c37ec8d166a9d1623a960e8e6e5d
SHA1 5e9f54877bf6114482cf3ac862c66ba6b078fb5f
SHA512 56215040dfc6d56de4f4b4f4cb00cca6a66a1ae8e3eb53e04ef4c5895b8c0c8f2e1a3b365493b8eb1cfc8cd3aab05775b2e418ae3d439979f43ae776dcdd5470
SSDEEP 1536:RwZY0dRogymSJ7nra/ZDfgmy13mOyasnbP9Eo73Yv:qndRog6Va/ZDBqAD9EoTYv
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

46782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile CreateFileA DeviceIoControl GetModuleHandleA GetEnvironmentVariableA MultiByteToWideChar WideCharToMultiByte LocalFree SetEndOfFile SetStdHandle IsBadCodePtr Sleep GetLastError GetModuleFileNameA CreateDirectoryA GetFileAttributesA DeleteFileA CreateProcessA WaitForSingleObject CloseHandle SetFileAttributesA CopyFileA LoadLibraryA GetProcAddress FreeLibrary GetWindowsDirectoryA GetVersionExA lstrlenA IsBadReadPtr GetStringTypeW GetStringTypeA FlushFileBuffers SetFilePointer IsBadWritePtr VirtualAlloc WriteFile RtlUnwind RaiseException GetCommandLineA GetVersion ExitProcess HeapFree HeapAlloc HeapReAlloc TerminateProcess GetCurrentProcess LCMapStringA LCMapStringW GetCPInfo HeapSize GetACP GetOEMCP SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree

advapi32

SetServiceStatus RegisterServiceCtrlHandlerA StartServiceCtrlDispatcherA ControlService DeleteService StartServiceA QueryServiceStatus CreateServiceA ChangeServiceConfig2A RegCreateKeyA RegSetValueExA OpenSCManagerA OpenServiceA CloseServiceHandle DeregisterEventSource RegOpenKeyExA RegCloseKey

ole32

CoUninitialize CoGetClassObject StringFromCLSID CoInitialize

oleaut32

VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

ca66c37ec8d166a9d1623a960e8e6e5d

kernel32

advapi32

ole32

oleaut32

generic