ccd7f0d7a14aa79c8e41d193f6236e04

General

Target
ccd7f0d7a14aa79c8e41d193f6236e04
Size 493KB
Sample240316-clb95ahd6v
SHA256 80a5441ea18b6a4aafd896639a9e5e1b63b8c484cb370abbb04faf107f8be473
MD5 ccd7f0d7a14aa79c8e41d193f6236e04
SHA1 c52aabf41fcc0831c28d325da601ba2d3d0f5eb9
SHA512 9aa2c4cd908b7e5b817a85618ef4d2011c2b50577fdc9d02f89113f240e047146077e255e5d8f6dff063ddbb172fd75ea441979b892bb99b6f1f2da4d1ea7698
SSDEEP 12288:WEtUIKG0L4HuZuXDztIn1RNFugQJBD7wIARwoOg80hx:WMz02guXvERNFDGnwI2z80h
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccd7f0d7a14aa79c8e41d193f6236e04

File Explorer

ccd7f0d7a14aa79c8e41d193f6236e04

.exe 493KB

ccd7f0d7a14aa79c8e41d193f6236e04

IMPHASH 21290e74dfe27e6d84750e7140040846
SHA256 80a5441ea18b6a4aafd896639a9e5e1b63b8c484cb370abbb04faf107f8be473
MD5 ccd7f0d7a14aa79c8e41d193f6236e04
SHA1 c52aabf41fcc0831c28d325da601ba2d3d0f5eb9
SHA512 9aa2c4cd908b7e5b817a85618ef4d2011c2b50577fdc9d02f89113f240e047146077e255e5d8f6dff063ddbb172fd75ea441979b892bb99b6f1f2da4d1ea7698
SSDEEP 12288:WEtUIKG0L4HuZuXDztIn1RNFugQJBD7wIARwoOg80hx:WMz02guXvERNFDGnwI2z80h
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

345783

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\rupegobeyatej\55\tuxipin59\zacivagam-tamene\noyod.pdb

kernel32

EnterCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd EraseTape GetSystemDefaultLCID CreateActCtxW GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InterlockedPopEntrySList SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputW GetProcessHeaps GetSystemWindowsDirectoryA GetUserDefaultLCID BuildCommDCBAndTimeoutsA HeapAlloc UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection RtlUnwind RaiseException HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc GetCommandLineA GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType SetFilePointer ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

ccd7f0d7a14aa79c8e41d193f6236e04

kernel32

user32

generic