cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07

Sharing

Copy URL Twitter E-mail

General

Target
cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07
Size 786KB
Sample240502-gv8rxadb68
SHA256 cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07
MD5 f49c53a4db7c7a6e0ef1e9243cde5ea5
SHA1 86e2388514f7f4c2a7acd09c03325b0ed690ef83
SHA512 8bd94a77fcbccbd25d6dcdbad6cf1aefc5e5cefdf3f73f4f7bda2d68147e0a87a877968067528c2bb3cfb95c3ffd668620547fb87a8691ed534bfc24a74b0226
SSDEEP 12288:TOZ8mfnnY5jT3ncoNw7JePBRZ20CohvlPMWaRUyunKH6bkhT0J:4pY5jwo0JGBRZlNNGtuKHEwT0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07

File Explorer

cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07

.exe 786KB

cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07

IMPHASH b5c6438640df57092a1d264477a39c24
SHA256 cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07
MD5 f49c53a4db7c7a6e0ef1e9243cde5ea5
SHA1 86e2388514f7f4c2a7acd09c03325b0ed690ef83
SHA512 8bd94a77fcbccbd25d6dcdbad6cf1aefc5e5cefdf3f73f4f7bda2d68147e0a87a877968067528c2bb3cfb95c3ffd668620547fb87a8691ed534bfc24a74b0226
SSDEEP 12288:TOZ8mfnnY5jT3ncoNw7JePBRZ20CohvlPMWaRUyunKH6bkhT0J:4pY5jwo0JGBRZlNNGtuKHEwT0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetModuleHandleExA CommConfigDialogA FindResourceW OpenJobObjectA InterlockedDecrement SetDefaultCommConfigW QueryPerformanceCounter GetEnvironmentStringsW InterlockedCompareExchange WriteConsoleInputA OpenSemaphoreA CreateHardLinkA SetTapeParameters SetThreadUILanguage FindNextVolumeMountPointA ConvertFiberToThread ReadConsoleW GetCompressedFileSizeW GetConsoleAliasExesW WaitNamedPipeW WriteFile EnumTimeFormatsW GetCommandLineA GetDriveTypeA GetVolumePathNameW FindResourceExA GetConsoleCP GlobalAlloc LoadLibraryW GetConsoleMode GetLocaleInfoW ReadConsoleInputA CopyFileW GetCalendarInfoA SetConsoleCP DeleteVolumeMountPointW GetFileAttributesA EnumSystemCodePagesA SetConsoleMode WriteConsoleInputW IsDBCSLeadByte GetACP CreateMailslotW GetShortPathNameA GetNamedPipeHandleStateW GetConsoleAliasesW InterlockedExchange GetStartupInfoA GetLastError SetLastError ReadConsoleOutputCharacterA PeekConsoleInputW SetVolumeLabelW RemoveDirectoryA EnumSystemCodePagesW FreeUserPhysicalPages SetComputerNameA FindClose GetAtomNameA SetCalendarInfoW MoveFileA SetConsoleCtrlHandler AddAtomA HeapWalk SetCommMask GetPrivateProfileSectionNamesA FindNextFileA EnumDateFormatsA _lread GetModuleHandleA FreeEnvironmentStringsW GetStringTypeW VirtualProtect PeekConsoleInputA GetWindowsDirectoryW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DeleteFileW WriteConsoleW GetComputerNameA GetTempFileNameW SetSystemPowerState GetCommandLineW WideCharToMultiByte HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer HeapReAlloc HeapSetInformation GetStartupInfoW RaiseException GetCPInfo InterlockedIncrement GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection CloseHandle GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar Sleep SetStdHandle FlushFileBuffers RtlUnwind HeapSize CreateFileW

user32

CharUpperA CharUpperBuffA

gdi32

GetTextFaceA

advapi32

RevertToSelf

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

cd1e5d43202f27d75d48c1d6963ef572eb3321e1ca3d6510c6a999598db09a07

kernel32

user32

gdi32

advapi32

winhttp

generic