cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49

General

Target
cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49
Size 790KB
Sample240502-yfcjlaee3z
SHA256 cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49
MD5 6006144f86c78d38cde4909f42bce6a9
SHA1 b7a77c33e1c3deb73bc2a4f0e5a0c7266a54ce5b
SHA512 07c6c5e0bcc4bf66788454c5032a99cb5861bdec3e2cd0d3e9aa7552dea30a960e5b6b7b2577f1e827ebefda4cd269fbae82ea18df1d4353ee73883153f9ead7
SSDEEP 12288:MgsKwcJStUJkvTtJzPtCLb3J7+7LKPiIPicrJa1lTCf:Kcyv/PwLb3J7+7LKvPicr4TC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49

File Explorer

cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49

.exe 790KB

cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49

IMPHASH 20a6a1c56501f5fd78f9b0e0618fa18b
SHA256 cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49
MD5 6006144f86c78d38cde4909f42bce6a9
SHA1 b7a77c33e1c3deb73bc2a4f0e5a0c7266a54ce5b
SHA512 07c6c5e0bcc4bf66788454c5032a99cb5861bdec3e2cd0d3e9aa7552dea30a960e5b6b7b2577f1e827ebefda4cd269fbae82ea18df1d4353ee73883153f9ead7
SSDEEP 12288:MgsKwcJStUJkvTtJzPtCLb3J7+7LKPiIPicrJa1lTCf:Kcyv/PwLb3J7+7LKvPicr4TC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

cdcbdb2e79a498adebe8c811eb0e284224166aaeffb94d1d04e0cf85c5eeff49

kernel32

advapi32

generic