0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053

General

Target
0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053
Size 393KB
Sample240619-3selyaxdmc
SHA256 0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053
MD5 15fe2f0f485f3fd3324d0a46970c2f75
SHA1 2be21ce37e7da24f65278f4239c3e2e3703380ef
SHA512 d727eab5f0ce87a851a5a49ce8fb045fa3d9a41ffc9779b8484c97a0ecc1bf54d88b38e8ad610b8392fa4a287ec70ef9a15696ed28af3b4054a89eeba29a3853
SSDEEP 6144:t7IXFk+bAgHkED1sD6ZTRjQ/IioBnNdOd1Aq4qpSGgR8NWcH:t0FkGAgHVfS9oBnNSCxnCH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053

File Explorer

0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053

.exe 393KB

0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053

IMPHASH db304426d56a03ec284d4b370092930f
SHA256 0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053
MD5 15fe2f0f485f3fd3324d0a46970c2f75
SHA1 2be21ce37e7da24f65278f4239c3e2e3703380ef
SHA512 d727eab5f0ce87a851a5a49ce8fb045fa3d9a41ffc9779b8484c97a0ecc1bf54d88b38e8ad610b8392fa4a287ec70ef9a15696ed28af3b4054a89eeba29a3853
SSDEEP 6144:t7IXFk+bAgHkED1sD6ZTRjQ/IioBnNdOd1Aq4qpSGgR8NWcH:t0FkGAgHVfS9oBnNSCxnCH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12373

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceA IsBadStringPtrW GlobalCompact LoadLibraryExW GetComputerNameW CreateHardLinkA GetSystemDefaultLCID OutputDebugStringW GetTickCount GetConsoleAliasesLengthA GetNumberFormatA EnumResourceTypesA GlobalAlloc GlobalFindAtomA LoadLibraryW ReadProcessMemory GetConsoleAliasW OpenMutexW GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA InterlockedExchangeAdd FindFirstVolumeMountPointW GetDiskFreeSpaceA OpenJobObjectW GetOEMCP lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW SetFilePointer WriteConsoleW HeapReAlloc IsProcessorFeaturePresent HeapSize HeapFree MultiByteToWideChar GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW HeapCreate HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte LCMapStringW GetStringTypeW Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind CreateFileW

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

Sharing

General

Malware Config

Signatures

File Explorer

0cd3680d33ba4b97dc4966483187e70f6cb310052bee318a04cd40d9ba969053

kernel32

user32

generic