cc40449c2c37c010f5eaa9b1eca01c6f

General

Target
cc40449c2c37c010f5eaa9b1eca01c6f
Size 516KB
Sample240315-yby7sshc7y
SHA256 dae96eed94ff74e5ebafaaa9139f0729228775934528e06dba194bace30cf807
MD5 cc40449c2c37c010f5eaa9b1eca01c6f
SHA1 488edf39c3c85da6dc7f92307874799dbfc6e823
SHA512 5007bfb34705cb0193f376d445108c45ae63bf74e4b169d97f8ee08dfe69c0c7af72f082942bb5dbdbb89b376984ed8adf25146f9f06c31f1a65a8e5752ef38a
SSDEEP 12288:HkT3mGykelpbOSRHcAtdKYUG4/RZ0bjR/XG8G7:+mGykBwHYNJZYR/XG8G
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc40449c2c37c010f5eaa9b1eca01c6f

File Explorer

cc40449c2c37c010f5eaa9b1eca01c6f

.exe 516KB

cc40449c2c37c010f5eaa9b1eca01c6f

IMPHASH d26e096e6fe908b4b897c7b821179bca
SHA256 dae96eed94ff74e5ebafaaa9139f0729228775934528e06dba194bace30cf807
MD5 cc40449c2c37c010f5eaa9b1eca01c6f
SHA1 488edf39c3c85da6dc7f92307874799dbfc6e823
SHA512 5007bfb34705cb0193f376d445108c45ae63bf74e4b169d97f8ee08dfe69c0c7af72f082942bb5dbdbb89b376984ed8adf25146f9f06c31f1a65a8e5752ef38a
SSDEEP 12288:HkT3mGykelpbOSRHcAtdKYUG4/RZ0bjR/XG8G7:+mGykBwHYNJZYR/XG8G
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bamesarirupac\gijanolo.pdb

kernel32

SetFilePointer lstrlenA CopyFileExW InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement CompareFileTime GetNamedPipeHandleStateA GlobalLock WaitForSingleObject SetEvent OpenSemaphoreA FreeEnvironmentStringsA GetTickCount CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW GetCommandLineA GetDriveTypeA TlsSetValue GetPriorityClass GetConsoleMode TerminateThread GetSystemWindowsDirectoryA SetConsoleMode IsProcessorFeaturePresent ReadFile GetBinaryTypeW GetOverlappedResult CompareStringW SetThreadContext GetPrivateProfileIntW CreateDirectoryA ReleaseActCtx GetFileSizeEx SetCurrentDirectoryA OpenMutexW GetLastError IsDBCSLeadByteEx ReadConsoleOutputCharacterA GetProcAddress CopyFileA LoadLibraryA CreateSemaphoreW LocalAlloc WriteProfileSectionW HeapWalk SetConsoleTitleW GetModuleHandleA FindFirstChangeNotificationA EnumResourceNamesA WriteProfileStringW GetConsoleCursorInfo FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA FindAtomW FindActCtxSectionStringW UnregisterWaitEx GetSystemTime LCMapStringW DeleteFileA GetStartupInfoW UnregisterWait WideCharToMultiByte HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc TlsFree SetLastError Sleep ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthW

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

cc40449c2c37c010f5eaa9b1eca01c6f

kernel32

gdi32

winhttp

generic