cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525

General

Target
cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525
Size 790KB
Sample240503-2hkvjaba68
SHA256 cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525
MD5 070c929d197872964e6376ffc396d799
SHA1 981e91f07a3ccb862aff88ccc27e89002c871334
SHA512 0a86709a67bf486a6ff23bc654c8130d46aa4f339e4b739a71d4a5dd5dc7c2948d11ae427674b851e13798e76ee7bc5890feebcbfc8d5501972e50a4147efcba
SSDEEP 12288:wYvYBpes8TulVC/lLdLmUcHMM0+eMxbL6f1Ga4Irwf:aBYuPo1oUGf0IHaMa4l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525

File Explorer

cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525

.exe 790KB

cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525

IMPHASH 85119ecdf5a2d0eab798abf1df3585e6
SHA256 cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525
MD5 070c929d197872964e6376ffc396d799
SHA1 981e91f07a3ccb862aff88ccc27e89002c871334
SHA512 0a86709a67bf486a6ff23bc654c8130d46aa4f339e4b739a71d4a5dd5dc7c2948d11ae427674b851e13798e76ee7bc5890feebcbfc8d5501972e50a4147efcba
SSDEEP 12288:wYvYBpes8TulVC/lLdLmUcHMM0+eMxbL6f1Ga4Irwf:aBYuPo1oUGf0IHaMa4l
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetModuleFileNameW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc HeapWalk FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

cfe33b3ccd4e1a6fe6a6164e39f69e1cb470f4fa1e5ddb2c07546e28ee960525

kernel32

advapi32

generic