cbbac547efe9564dd5b0cb6cb9b7c3bd

Sharing

Copy URL Twitter E-mail

General

Target
cbbac547efe9564dd5b0cb6cb9b7c3bd
Size 32KB
Sample240315-sj38tsdf44
SHA256 5e68f197b77ca12d4d4060a3879fa3d9cfb0a239c194b3598fd1cfd8c2d5215f
MD5 cbbac547efe9564dd5b0cb6cb9b7c3bd
SHA1 b73b958e7b8d7c0648dd0f89b58202d75a7388b5
SHA512 5571415d69ab55ca707b6adf22c3f0d27f3f4756b8aa41d51eeb9da25848dfe1d14c6231d415b2744d09c7baebc4ee4c6a542457181417966ddad7fcc97c7968
SSDEEP 384:U6IqLnwBADIjDKf6LiItmXkSVOXFKy+b3p41+b3BnF7H1nIDjYE0W:YanFkepxX9s1Kyyky11H1I
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbbac547efe9564dd5b0cb6cb9b7c3bd

File Explorer

cbbac547efe9564dd5b0cb6cb9b7c3bd

.exe 32KB

cbbac547efe9564dd5b0cb6cb9b7c3bd

IMPHASH 13178d418216ad60acced34c06120e15
SHA256 5e68f197b77ca12d4d4060a3879fa3d9cfb0a239c194b3598fd1cfd8c2d5215f
MD5 cbbac547efe9564dd5b0cb6cb9b7c3bd
SHA1 b73b958e7b8d7c0648dd0f89b58202d75a7388b5
SHA512 5571415d69ab55ca707b6adf22c3f0d27f3f4756b8aa41d51eeb9da25848dfe1d14c6231d415b2744d09c7baebc4ee4c6a542457181417966ddad7fcc97c7968
SSDEEP 384:U6IqLnwBADIjDKf6LiItmXkSVOXFKy+b3p41+b3BnF7H1nIDjYE0W:YanFkepxX9s1Kyyky11H1I
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

WSASocketA setsockopt htonl sendto inet_addr gethostbyname recv WSACleanup WSAGetLastError closesocket WSAStartup socket htons connect send WSAAsyncSelect

kernel32

FreeLibrary LocalFree MapViewOfFile CloseHandle UnmapViewOfFile GetCurrentProcess GetVersionExA GetTickCount GetLastError CreateMutexA LoadLibraryA DeleteFileA ExitProcess GetModuleFileNameA GetSystemDirectoryA SetPriorityClass Process32Next Process32First CreateToolhelp32Snapshot WriteFile CreateFileA Sleep ResumeThread CreateThread WinExec lstrcatA lstrcpyA MoveFileA GetProcAddress GetComputerNameA SetFileAttributesA GetCurrentProcessId HeapAlloc GetProcessHeap GetModuleHandleA GetStartupInfoA GetCommandLineA CopyFileA GlobalMemoryStatus

user32

wsprintfA DefWindowProcA ExitWindowsEx PostQuitMessage RegisterClassA CreateWindowExA ShowWindow UpdateWindow SendMessageA GetMessageA TranslateMessage DispatchMessageA

advapi32

ControlService CloseServiceHandle StartServiceA OpenSCManagerA OpenServiceA ChangeServiceConfigA RegOpenKeyExA RegRestoreKeyA RegisterServiceCtrlHandlerA SetServiceStatus StartServiceCtrlDispatcherA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges GetSecurityInfo SetEntriesInAclA SetSecurityInfo QueryServiceStatus

msvcp60

??0Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ

msvcrt

strstr _itoa atoi strncpy rand __CxxFrameHandler printf fclose fprintf fopen sprintf malloc _strlwr strcspn _stricmp

Sharing

General

Malware Config

Signatures

File Explorer

cbbac547efe9564dd5b0cb6cb9b7c3bd

ws2_32

kernel32

user32

advapi32

msvcp60

msvcrt

generic