ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9

General

Target
ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9
Size 419KB
Sample240507-31lefsac53
SHA256 ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9
MD5 23a552659649b551b45ee82f29eeb0f3
SHA1 b11cc99614a496e169b68245248ad108d25a1ebe
SHA512 77579b896acd78b1f3dc603d92004c25dfe031f9ed40a6e737d338c054e06b17d149f2341ab86b12b317005f0d5859a847c69dfa3f4c2a6a69d18e7dd6764aa0
SSDEEP 6144:adQDC9/gjoevDLvcjEgQvXr04KLq8pGYkmCuf8Tt41:adQDSojoevn4o04T8pGYkmCh41
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9

File Explorer

ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9

.exe 419KB

ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9

IMPHASH 40ce6fbcf20eabd423c57b484adbe4f8
SHA256 ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9
MD5 23a552659649b551b45ee82f29eeb0f3
SHA1 b11cc99614a496e169b68245248ad108d25a1ebe
SHA512 77579b896acd78b1f3dc603d92004c25dfe031f9ed40a6e737d338c054e06b17d149f2341ab86b12b317005f0d5859a847c69dfa3f4c2a6a69d18e7dd6764aa0
SSDEEP 6144:adQDC9/gjoevDLvcjEgQvXr04KLq8pGYkmCuf8Tt41:adQDSojoevn4o04T8pGYkmCh41
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA SetCommState GetSystemTimes LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc SetCurrentDirectoryW FindAtomA EnumDateFormatsA GetCurrentDirectoryA GetSystemTime GetVolumeInformationW SetConsoleTitleA EnumCalendarInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

ccc8a6f55ef2025afc69a9810d8dde726e5c3c71de31b59a3edf0610160dcdf9

kernel32

advapi32

generic