file

General

Target
file
Size 326KB
Sample240520-vtp53aab73
SHA256 3b50fe74f6b83d53efab2ee7e197026977dac17fdd3302c7df454fac19abb12d
MD5 a59664f37c25edaa69c39a65490ed3a9
SHA1 01bb46541bc678fe9d97cea31cb61f3db861ba68
SHA512 76ba5fea9e63bf091ac2f2234447ad48c93b1b21594fd2c737d24073efc2871265c83622364764c886769d579c727784c045d3d4b2fc0a6e778dc30e64f1f393
SSDEEP 6144:Rj8KWXflIwycVYUcBrcisb765kohreOCSYA/U:+Kkfl3x0BrcdEkoWCc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file

File Explorer

file

.exe 326KB

IMPHASH b5464cd11a888f8c2431f32a12ac9b22
SHA256 3b50fe74f6b83d53efab2ee7e197026977dac17fdd3302c7df454fac19abb12d
MD5 a59664f37c25edaa69c39a65490ed3a9
SHA1 01bb46541bc678fe9d97cea31cb61f3db861ba68
SHA512 76ba5fea9e63bf091ac2f2234447ad48c93b1b21594fd2c737d24073efc2871265c83622364764c886769d579c727784c045d3d4b2fc0a6e778dc30e64f1f393
SSDEEP 6144:Rj8KWXflIwycVYUcBrcisb765kohreOCSYA/U:+Kkfl3x0BrcdEkoWCc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

48176

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\Users\Administrator\Jenkins\workspace\ccx-libraries-windows\build\Release\CCLibrary.pdb

kernel32

SetInformationJobObject QueryInformationJobObject ReleaseSemaphore AssignProcessToJobObject GetModuleFileNameW CreateJobObjectW CreateMutexA WaitForSingleObject ReleaseMutex OpenSemaphoreA GetTempPathA GetLastError CloseHandle GetLocalTime CreateProcessW GetModuleHandleW CreateDirectoryA GetExitCodeProcess SetEndOfFile MultiByteToWideChar WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EncodePointer DecodePointer LCMapStringW GetLocaleInfoW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlPcToFileHeader RaiseException RtlUnwindEx FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapAlloc FlushFileBuffers GetConsoleCP GetConsoleMode HeapFree GetFileSizeEx SetFilePointerEx GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap CreateFileW HeapSize WriteConsoleW RtlUnwind

Sharing