ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552

General

Target
ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552
Size 270KB
Sample240607-psq33shb34
SHA256 ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552
MD5 acb4e9c1d0960dc36b3f892be8c5a7b5
SHA1 eb0f1aa120a70bea9d941f1e2d0158929bfc83bd
SHA512 cf91a6d526b3ce5714e21aab15c05d5690a727f8eb252c48c5abdb5e0bdd5975ff494c00e9b496b58622f2a228e81c06e41e541085d0bd8b24a7dae5b341d3ae
SSDEEP 3072:iLzL3tA7JfAi4J+HAWQHLXLv9MOFK8Iuz2e+S5ArQFaOe5eTll5y:i3L3ytIi4J5XKBuacreITR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552

File Explorer

ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552

.exe 270KB

ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552

IMPHASH 3a40287dbdd1907b02105bdb2b12e551
SHA256 ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552
MD5 acb4e9c1d0960dc36b3f892be8c5a7b5
SHA1 eb0f1aa120a70bea9d941f1e2d0158929bfc83bd
SHA512 cf91a6d526b3ce5714e21aab15c05d5690a727f8eb252c48c5abdb5e0bdd5975ff494c00e9b496b58622f2a228e81c06e41e541085d0bd8b24a7dae5b341d3ae
SSDEEP 3072:iLzL3tA7JfAi4J+HAWQHLXLv9MOFK8Iuz2e+S5ArQFaOe5eTll5y:i3L3ytIi4J5XKBuacreITR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement CreateJobObjectW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA FormatMessageA LoadLibraryW SetVolumeMountPointA WriteConsoleOutputA GetStringTypeExW lstrcpynW GetTimeFormatW FindNextVolumeW SetTimeZoneInformation FileTimeToSystemTime GetModuleFileNameW SetConsoleTitleA RaiseException GetStringTypeExA GetConsoleAliasesW EnumCalendarInfoW SetLastError GetProcAddress SetVolumeLabelW VerLanguageNameW LoadLibraryA LocalAlloc SetConsoleCursorInfo lstrcatW GetProcessAffinityMask BuildCommDCBA PurgeComm EnumDateFormatsW CompareStringA DeleteCriticalSection DeleteAtom OpenFileMappingA EnumCalendarInfoExA SetThreadLocale GetComputerNameA GetLastError HeapFree HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree LeaveCriticalSection EnterCriticalSection VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconW SetActiveWindow

advapi32

RevertToSelf

Sharing

General

Malware Config

Signatures

File Explorer

ddc5593ce74ca4abc5e56238eb8bbbea9e2c8af8de7f334e2ff5198aecef8552

kernel32

user32

advapi32

generic