1caa6cb23b83af1cfbec55ab049158bb134cf19bd300fed3768cb0efd147b6d8

General

Target
1caa6cb23b83af1cfbec55ab049158bb134cf19bd300fed3768cb0efd147b6d8
Size 392KB
Sample240519-enw4eshf2v
SHA256 1caa6cb23b83af1cfbec55ab049158bb134cf19bd300fed3768cb0efd147b6d8
MD5 0f406abdc2bd50b3488123ee4cbb942a
SHA1 380cd9fc26e2bfebc50ae133d3c85476dc741a9d
SHA512 445b6f2f19b187034216328de1837af756050d48a9575a8622bbc6e2a32afe7ea7d72e21e40291349dc1b47b5b934dbeb7a20d998963864b05fa76b826c29521
SSDEEP 12288:xShA4MqGxBC+wvPlKCkw9PNqwqf5kKTR6sjbzBtX6:xShAXE+YPlKCjPNrKtZzB0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3cdfdfb5d50e736398dd501d4e8a29d9757b74186f57a4e57f11859e6e1cd552.exe

File Explorer

1caa6cb23b83af1cfbec55ab049158bb134cf19bd300fed3768cb0efd147b6d8

.zip 392KB
3cdfdfb5d50e736398dd501d4e8a29d9757b74186f57a4e57f11859e6e1cd552.exe

.exe 467KB

1caa6cb23b83af1cfbec55ab049158bb134cf19bd300fed3768cb0efd147b6d8

SHA256 1caa6cb23b83af1cfbec55ab049158bb134cf19bd300fed3768cb0efd147b6d8
MD5 0f406abdc2bd50b3488123ee4cbb942a
SHA1 380cd9fc26e2bfebc50ae133d3c85476dc741a9d
SHA512 445b6f2f19b187034216328de1837af756050d48a9575a8622bbc6e2a32afe7ea7d72e21e40291349dc1b47b5b934dbeb7a20d998963864b05fa76b826c29521
SSDEEP 12288:xShA4MqGxBC+wvPlKCkw9PNqwqf5kKTR6sjbzBtX6:xShAXE+YPlKCjPNrKtZzB0
MD5 SHA1 SHA512 SSDEEP

Password

infected

3cdfdfb5d50e736398dd501d4e8a29d9757b74186f57a4e57f11859e6e1cd552.exe

IMPHASH e0b6966096a2c186c5f52fee6a381e0f
SHA256 3cdfdfb5d50e736398dd501d4e8a29d9757b74186f57a4e57f11859e6e1cd552
MD5 fbee116ae1233a54e216f5a14598c24b
SHA1 2603e1c1387339d4b2cc4594f57b97436f281b7a
SHA512 5fe8058e8480f94e2659e05383424535a8b9cc38543a068c89aded04ea2a69ce6cf954ea590a6d83a04dcb51dd0fafdebfe95b73c994a4587c136919c974548b
SSDEEP 6144:Hh51kNkv8M7MXSLDOIFXA4Ojog7Au1J40Hg7gvLDXLMQpi8oS0+J2wNZOJkPMJzd:z1kNqB4jocvzHegDDI8IS9owNZA/Fn
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

23774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CreateRemoteThread VirtualAlloc FreeConsole CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread QueryPerformanceCounter ReleaseSRWLockExclusive WakeAllConditionVariable WideCharToMultiByte MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

1caa6cb23b83af1cfbec55ab049158bb134cf19bd300fed3768cb0efd147b6d8

3cdfdfb5d50e736398dd501d4e8a29d9757b74186f57a4e57f11859e6e1cd552.exe

kernel32

generic