caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376

Sharing

Copy URL Twitter E-mail

General

Target
caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376
Size 667KB
Sample240612-ncjtdsself
SHA256 caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376
MD5 a04da64eaca90c70512e070758510648
SHA1 0b018905464124b537d7557c1d5d02d036fe5b44
SHA512 c7e9626876f96f9b0fb11edd6b3a26eac7e5a3e7a5e8c84f5e5a5c55985e46ddbddd580351dc44650d93dfb2b089ca39ffe206158ec1dc76c05f9d7707006ffa
SSDEEP 12288:76JJG//tnC5VCFSoDpaQlHfl6mCiWDaBMNCgbnG:76J6/tniVNoDgQVN6mCip9gbG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376

File Explorer

caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376

.exe 667KB

caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376

IMPHASH beb5959bb1e83e2e3f4789da7e63bdcd
SHA256 caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376
MD5 a04da64eaca90c70512e070758510648
SHA1 0b018905464124b537d7557c1d5d02d036fe5b44
SHA512 c7e9626876f96f9b0fb11edd6b3a26eac7e5a3e7a5e8c84f5e5a5c55985e46ddbddd580351dc44650d93dfb2b089ca39ffe206158ec1dc76c05f9d7707006ffa
SSDEEP 12288:76JJG//tnC5VCFSoDpaQlHfl6mCiWDaBMNCgbnG:76J6/tniVNoDgQVN6mCip9gbG
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\DODO\Videos\TwoStageSearch\TwoStageSearch\TwoStageSearch\Release\TwoStageSearch.pdb

kernel32

Sleep GetExitCodeProcess ReadFile CreateFileW GetTempPathW GetFileSizeEx GetLastError GetCurrentDirectoryW GetProcAddress VirtualAlloc FindClose SetCurrentDirectoryW FindNextFileW CloseHandle DeleteFileW FlushFileBuffers GetFullPathNameA WriteConsoleW CreateProcessW WaitForSingleObject ReadConsoleW SetEndOfFile GetTimeZoneInformation SetStdHandle RtlUnwind HeapReAlloc OutputDebugStringW LoadLibraryExW FreeLibrary SetConsoleCtrlHandler SetFilePointerEx GetConsoleMode GetConsoleCP LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LoadLibraryW GetStringTypeW SetEnvironmentVariableW LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter DeleteCriticalSection RaiseException GetFileAttributesExW CreateSemaphoreW GetTickCount GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess CreateEventW InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter GetFullPathNameW PeekNamedPipe GetFileType GetFileInformationByHandle FileTimeToLocalFileTime HeapSize GetModuleFileNameW WriteFile GetStdHandle AreFileApisANSI GetModuleHandleExW ExitProcess GetProcessHeap WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId GetModuleHandleW GetLocaleInfoW FindFirstFileExW GetLogicalDriveStringsW GetEnvironmentVariableW GetCurrentThread SetLastError GetCPInfo GetOEMCP SetFilePointer FindFirstFileW CreateFileA GetTempFileNameW FatalAppExitA GetACP IsValidCodePage GetCommandLineW HeapFree HeapAlloc EncodePointer DecodePointer GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime IsDebuggerPresent IsProcessorFeaturePresent SetEnvironmentVariableA

user32

EndPaint ClientToScreen DestroyWindow GetWindowTextLengthW TranslateAcceleratorW ScreenToClient GetWindowRect SetActiveWindow GetMessageW SendInput PostQuitMessage SetKeyboardState GetKeyState GetSubMenu GetFocus DialogBoxParamW GetParent LoadCursorW GetClipCursor FindWindowW GetClientRect SetFocus BeginPaint wsprintfW TranslateMessage LoadAcceleratorsW GetKeyboardState GetMenu RegisterClassExW OffsetRect GetAsyncKeyState MessageBoxA SetCursorPos LoadMenuW GetAncestor GetWindowTextW PeekMessageW GetDlgItem EndDialog GetDesktopWindow GetCursorPos LoadStringW EnumChildWindows ShowWindow SetMenu GetSysColorBrush LoadBitmapW CreateDialogParamW FindWindowExW ClipCursor CreateWindowExW SetMenuDefaultItem MessageBoxW GetComboBoxInfo GetSystemMetrics IsWindowVisible SendMessageW UpdateWindow GetDlgCtrlID SetWindowTextW DefWindowProcW CopyRect GetWindow MoveWindow DispatchMessageW LoadIconW

gdi32

CreateFontW DeleteObject

advapi32

CryptAcquireContextA

shell32

ShellExecuteW SHOpenWithDialog ShellExecuteExW

comctl32

ord413 ImageList_Add ImageList_Create ord410

shlwapi

ord191 PathMatchSpecW

Sharing

General

Malware Config

Signatures

File Explorer

caf9e8949c246a2039f2ca12f6dd67e525311b99f8cf96944523bca11ab0d376

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

generic