c0ef05f7ddcbd4e305d13691ab2b2914[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
c0ef05f7ddcbd4e305d13691ab2b2914.exe
Size 255KB
Sample240327-klez1sbf5z
SHA256 d1bdeb7bcad474dc621ccaf3e266c0fb31edea844d574f802f27090ac04574c6
MD5 c0ef05f7ddcbd4e305d13691ab2b2914
SHA1 ded74f87716233844fccdd3f394e9a56cf6fdfa7
SHA512 84076ebae0982d33d9525d480d4e74867ba5b427b6dd7eb2260d79866134b389f1cebc592598121ebf256eedcd3ea35c456cfcedc1acfce271f53b895c6a12ba
SSDEEP 6144:D1cGM+03omLlJ/Ghqfg1Iq2iCf2X9wtno64:yGM+oomL3i1IeCf16
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ef05f7ddcbd4e305d13691ab2b2914.exe

File Explorer

c0ef05f7ddcbd4e305d13691ab2b2914.exe

.exe 255KB

c0ef05f7ddcbd4e305d13691ab2b2914.exe

IMPHASH 1c7e433e6e9d88cb6ca51ea2fd15d65a
SHA256 d1bdeb7bcad474dc621ccaf3e266c0fb31edea844d574f802f27090ac04574c6
MD5 c0ef05f7ddcbd4e305d13691ab2b2914
SHA1 ded74f87716233844fccdd3f394e9a56cf6fdfa7
SHA512 84076ebae0982d33d9525d480d4e74867ba5b427b6dd7eb2260d79866134b389f1cebc592598121ebf256eedcd3ea35c456cfcedc1acfce271f53b895c6a12ba
SSDEEP 6144:D1cGM+03omLlJ/Ghqfg1Iq2iCf2X9wtno64:yGM+oomL3i1IeCf16
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode GetConsoleAliasExesLengthA SetUnhandledExceptionFilter InterlockedIncrement WaitForSingleObject SetComputerNameW ConnectNamedPipe GetModuleHandleW GetTickCount LoadLibraryW GetLocaleInfoW HeapCreate GetFileAttributesW FindNextVolumeMountPointW SetConsoleTitleA GetConsoleOutputCP TryEnterCriticalSection GetLongPathNameW GetThreadLocale GetProcAddress HeapSize GetAtomNameA CreateHardLinkW FindAtomA GlobalFindAtomW GetModuleFileNameA HeapSetInformation GetCurrentDirectoryA SetCalendarInfoA GetLastError CreateFileA CloseHandle CreateFileW ReadFile HeapAlloc GetCommandLineA GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer HeapFree IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW HeapReAlloc FlushFileBuffers

user32

GetMonitorInfoA

advapi32

RegCreateKeyW

ole32

CoTaskMemFree

winhttp

WinHttpOpen