ccd5fb7c75c123189cf804e5bec2b5850896ef88c526ad34737da42686056b0a
- SHA256 ccd5fb7c75c123189cf804e5bec2b5850896ef88c526ad34737da42686056b0a
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a88e9c57e89817701d2651b556f76641e10a7fb54eb29cf9a466648b25fe6716.exe
Resource
win7-20240221-en
windows7-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
a88e9c57e89817701d2651b556f76641e10a7fb54eb29cf9a466648b25fe6716.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
14 signatures
150 seconds
General
- Target ccd5fb7c75c123189cf804e5bec2b5850896ef88c526ad34737da42686056b0a
- Size 202KB
- Sample240417-rdj3bsba48
- SHA256 ccd5fb7c75c123189cf804e5bec2b5850896ef88c526ad34737da42686056b0a
- MD5 6ee5ea179ace7d86aee324c128b44eb7
- SHA1 a67c41a7ac6a0fe365b26a89ae6c67b509249314
- SHA512 ab30d3eadb0ad36b49230915a67df261ea92b9baf2ad8bad8d73c5855f1c747404c32fff9b90351876b8b301d3ada18b907e3015243833af4b5066b518cfabc2
- SSDEEP 6144:DKHP91ya2EPh20OFtTAYWnLo5T2ujoKYZq06Gmrb3zXH7hcp:DKHV1yjy20a0nLo8uIsHbDXdE
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a88e9c57e89817701d2651b556f76641e10a7fb54eb29cf9a466648b25fe6716.exe
File Explorer
-
ccd5fb7c75c123189cf804e5bec2b5850896ef88c526ad34737da42686056b0a.zip 202KB
-
a88e9c57e89817701d2651b556f76641e10a7fb54eb29cf9a466648b25fe6716.exe.exe 338KB
a88e9c57e89817701d2651b556f76641e10a7fb54eb29cf9a466648b25fe6716.exe
- IMPHASH d8507a8b152f56267b5250a792ccaa4c
- SHA256 a88e9c57e89817701d2651b556f76641e10a7fb54eb29cf9a466648b25fe6716
- MD5 6d94d664f9ba75013dddf5cefbc9a4f5
- SHA1 a9c58e2be33854f91cb6eb19701b71b2ad0c8db0
- SHA512 a8f8f4985a9fbaaddde72c2a700f11af12232dd2846eeba0f9c7988842bf51154d65c0126d85d610cd321cf6ae04d4dd32e578f54461e04401a44c48ed393846
- SSDEEP 3072:m/1uwdeUo9srEwzwl6XH4qopEhNJJHpTazxQQ9X4V0vIrFCZezRothGwUy8hv857:8eLLXl6VoyhNbSxQQpHQrqRfqv8+N
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
19654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\garaneriwe-gogefamu\gel65\cer\tezalonaj7\ciwimi.pdb
kernel32
SetComputerNameExA
FindResourceW
BuildCommDCBAndTimeoutsA
InterlockedDecrement
GetCurrentProcess
InterlockedCompareExchange
AddConsoleAliasW
CreateHardLinkA
FreeEnvironmentStringsA
GetModuleHandleW
GetDateFormatA
ReadConsoleInputA
GetSystemWindowsDirectoryA
GetConsoleAliasExesLengthW
CreateFileW
GetVolumePathNameA
FindFirstFileA
GetLastError
InterlockedFlushSList
SetLastError
ReadConsoleOutputCharacterA
PeekNamedPipe
VirtualAlloc
VirtualAllocEx
SetFileApisToOEM
LoadLibraryA
SetFileApisToANSI
FindAtomA
SetEnvironmentVariableA
GetOEMCP
GetModuleHandleA
FreeEnvironmentStringsW
EnumResourceNamesA
GetConsoleTitleW
GetShortPathNameW
FileTimeToLocalFileTime
FindFirstVolumeW
DeleteFileA
CreateFileA
CloseHandle
WriteConsoleW
GetConsoleAliasesLengthW
FindFirstChangeNotificationW
SetFilePointer
FindVolumeClose
GetProcAddress
UnregisterWait
GetConsoleOutputCP
WriteConsoleA
WideCharToMultiByte
InterlockedIncrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
IsValidCodePage
GetLocaleInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
user32
ChangeMenuW
GetMessageExtraInfo
LoadMenuW
gdi32
GetPolyFillMode
GetCharacterPlacementW
advapi32
ReadEventLogW
ReportEventW
ole32
CoGetPSClsid
Name
.text
Size
190KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
31.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
94KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=149, productName=VS2008 build 21022, version=21022,
count=54, id=132, productName=VS2008 build 21022, version=21022,
count=133, id=131, productName=VS2008 build 21022, version=21022,
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=126, id=1, productName=Unmarked objects,
count=1, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,