d8c5e370665d8dcc7871514817ccb4a9

Sharing

Copy URL Twitter E-mail

General

Target
d8c5e370665d8dcc7871514817ccb4a9
Size 49KB
Sample240320-pc65csha4t
SHA256 e2652df4d4e8d94a40abaa555fab51768159de117b4e756bee20a5dfbca82bc1
MD5 d8c5e370665d8dcc7871514817ccb4a9
SHA1 24b134757121888198726c8f3bc6f43bde73fd17
SHA512 030ff3efcbb69dfba32665d676b2df102cf7170e1f6ad351b9380fa59c6f27b22c0e55be0033645a638e4c12ae834356d474d34d18e7a7848e0caa9fa452c17b
SSDEEP 768:DCCCFlkbwAYbFshpyiB9L9Mx2BWseUCHGAwk5R9Jw:3bw/6plBTFBYNNR9Jw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8c5e370665d8dcc7871514817ccb4a9

File Explorer

d8c5e370665d8dcc7871514817ccb4a9

.exe 49KB

d8c5e370665d8dcc7871514817ccb4a9

IMPHASH e0f61286c6396ccf28fed994d6a49819
SHA256 e2652df4d4e8d94a40abaa555fab51768159de117b4e756bee20a5dfbca82bc1
MD5 d8c5e370665d8dcc7871514817ccb4a9
SHA1 24b134757121888198726c8f3bc6f43bde73fd17
SHA512 030ff3efcbb69dfba32665d676b2df102cf7170e1f6ad351b9380fa59c6f27b22c0e55be0033645a638e4c12ae834356d474d34d18e7a7848e0caa9fa452c17b
SSDEEP 768:DCCCFlkbwAYbFshpyiB9L9Mx2BWseUCHGAwk5R9Jw:3bw/6plBTFBYNNR9Jw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetTickCount FreeConsole TlsAlloc TlsAlloc

user32

CheckDlgButton DestroyMenu GetAncestor SetParent GetCursorInfo GetPropA SetUserObjectInformationW GetDC AppendMenuW SetWindowLongW AppendMenuA ChangeDisplaySettingsA UnionRect DrawTextExA GetUpdateRect CreateDialogIndirectParamW GetWindowLongW ExcludeUpdateRgn CallMsgFilterA GetDlgItem CascadeWindows GetSubMenu GetClassWord GetUserObjectSecurity GetParent DlgDirListW PeekMessageA SetWindowTextW CreateMDIWindowA RemoveMenu LoadKeyboardLayoutW GetLastActivePopup AttachThreadInput LoadKeyboardLayoutA EnumDisplaySettingsExW

ws2_32

accept WSAWaitForMultipleEvents WSACancelBlockingCall inet_ntoa WSAInstallServiceClassA setsockopt WSAEnumProtocolsW WSAHtons WSASendTo WSAEnumProtocolsA WSAEnumNameSpaceProvidersW WSAEnumNameSpaceProvidersA WSARecvDisconnect getprotobyname getprotobynumber getservbyname WSAGetServiceClassNameByClassIdA gethostbyaddr gethostbyname WSAGetQOSByName gethostname WSAGetServiceClassInfoA WSASocketW WSAUnhookBlockingHook getpeername WSAHtonl WSAEventSelect WSAGetLastError WSASetServiceW

rtm

RtmUpdateAndUnlockRoute RtmRegisterForChangeNotification RtmCreateDestEnum RtmGetNextHopInfo RtmLockRoute RtmCreateRouteList RtmReleaseChangedDests RtmGetChangedDests RtmGetExactMatchDestination RtmReleaseEntities RtmGetEntityInfo RtmReleaseNextHopInfo RtmReleaseRoutes RtmGetRouteInfo RtmIgnoreChangedDests RtmReleaseRouteInfo RtmGetRoutePointer RtmCreateNextHopEnum RtmLockDestination RtmGetEnumRoutes RtmGetEntityMethods RtmFindNextHop RtmInvokeMethod RtmDeleteEnumHandle RtmIsBestRoute

secur32

EnumerateSecurityPackagesW AcquireCredentialsHandleW FreeCredentialsHandle EnumerateSecurityPackagesA RevertSecurityContext ApplyControlToken ImpersonateSecurityContext

Name

.text

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

512B

Virtual Size

429B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d8c5e370665d8dcc7871514817ccb4a9

kernel32

user32

ws2_32

rtm

secur32

generic