cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0

Sharing

Copy URL Twitter E-mail

General

Target
cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0
Size 316KB
Sample240625-yygk9sshll
SHA256 cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0
MD5 97175eb8e852354cefb670f6863bb703
SHA1 efecc11d00781ed16891a3564223aa543698c3aa
SHA512 ae36ea89767b4690c909b4c1c16840749653e53356316a877030e17b529d575946793521ef151b4fa637525bcd46f62785df4ed14da3fbee7071fd5d4c3a9631
SSDEEP 3072:a6SLDd01WNOGMb1T1tsy05Zt4Lt3oS1Ek1EfxTEqS:8L50kWpYym83ZNt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0

File Explorer

cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0

.exe 316KB

cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0

IMPHASH be6c5f1f4b8a20803995dd7430395ac0
SHA256 cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0
MD5 97175eb8e852354cefb670f6863bb703
SHA1 efecc11d00781ed16891a3564223aa543698c3aa
SHA512 ae36ea89767b4690c909b4c1c16840749653e53356316a877030e17b529d575946793521ef151b4fa637525bcd46f62785df4ed14da3fbee7071fd5d4c3a9631
SSDEEP 3072:a6SLDd01WNOGMb1T1tsy05Zt4Lt3oS1Ek1EfxTEqS:8L50kWpYym83ZNt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5794

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommProperties GetModuleHandleW GetTickCount EnumCalendarInfoExW GetConsoleTitleA ReadConsoleOutputA GlobalAlloc LoadLibraryW SetVolumeMountPointA lstrcpynW LocalReAlloc WriteConsoleW GetModuleFileNameW GetConsoleAliasesW InterlockedExchange CreateJobObjectW GetProcAddress LoadLibraryA UnhandledExceptionFilter AddAtomA FoldStringW lstrcatW BuildCommDCBA PurgeComm FindFirstVolumeW GlobalAddAtomW OpenFileMappingA AreFileApisANSI GetNumaNodeProcessorMask GetConsoleAliasExesLengthA GetLastError GetComputerNameA GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WriteConsoleA GetConsoleOutputCP SetFilePointer SetStdHandle InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile CreateFileA CloseHandle GetModuleHandleA

user32

LoadIconA

gdi32

GetCharWidth32W

advapi32

EnumDependentServicesW

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

cded5b7ba6b257bcbea829cd06dbab1d97ca9f72b41f82526cfbcf8b99ba68f0

kernel32

user32

gdi32

advapi32

ole32

generic