c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642

General

Target
c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642
Size 773KB
Sample240507-3y6bvafd2v
SHA256 c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642
MD5 61565cb8d60ec35e5bc56ac8bf0a5eed
SHA1 abaa43442434e22d3f98e2fd99499b511b22b6c2
SHA512 f45e611e8944563d5283ab6ace9591578bcf74f1a3b024e49d1ec7e267d1d80638a5d3fb78736488fc09838d3c64b34f0208c980161124d36d2c129176b1b4cb
SSDEEP 12288:+r+wxBSJAOQvmvaKFCrFEUXXbZol+vfrLhDmJuRVZorzHV5rZS6nZNbNZk:+6z2OQuFUZS+7LEuRPonVhn9Zk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642

File Explorer

c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642

.exe 773KB

c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642

IMPHASH d4e235ce871ad26a687da89d3c34041b
SHA256 c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642
MD5 61565cb8d60ec35e5bc56ac8bf0a5eed
SHA1 abaa43442434e22d3f98e2fd99499b511b22b6c2
SHA512 f45e611e8944563d5283ab6ace9591578bcf74f1a3b024e49d1ec7e267d1d80638a5d3fb78736488fc09838d3c64b34f0208c980161124d36d2c129176b1b4cb
SSDEEP 12288:+r+wxBSJAOQvmvaKFCrFEUXXbZol+vfrLhDmJuRVZorzHV5rZS6nZNbNZk:+6z2OQuFUZS+7LEuRPonVhn9Zk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer InterlockedIncrement InterlockedDecrement GetComputerNameW LockFile BackupSeek EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetLastError SetLastError GetProcAddress SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW RemoveDirectoryW GlobalUnWire GetModuleHandleA LoadLibraryExA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetCaretPos ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

c55cc386307057326269602b35ffc9d7f445b99e5183707cd03937cad0a4e642

kernel32

user32

generic