1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7

General

Target
1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7
Size 252KB
Sample240711-3rhl7ssbmd
SHA256 1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7
MD5 541845a8b6a6bc830ca0db9fa480956b
SHA1 e909ef06729eca8e62f8fbc91ae180fcfedfb1e1
SHA512 d9b2b50133f7a4654e104bf9c334ab12cb490e3f42c6fa9c18faba5769ba15b4353b3ead93d8c75027e8ca7bcf797a470559b1292a848451f3d76ba12c539d38
SSDEEP 6144:PiLd3M90UPAOimF3ku5xmIQJG8sYAi91:Pip890UPKm9eImsYAi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7

File Explorer

1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7

.exe 252KB

1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7

IMPHASH 120f8352b25e55c90fa47aee4cf166a0
SHA256 1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7
MD5 541845a8b6a6bc830ca0db9fa480956b
SHA1 e909ef06729eca8e62f8fbc91ae180fcfedfb1e1
SHA512 d9b2b50133f7a4654e104bf9c334ab12cb490e3f42c6fa9c18faba5769ba15b4353b3ead93d8c75027e8ca7bcf797a470559b1292a848451f3d76ba12c539d38
SSDEEP 6144:PiLd3M90UPAOimF3ku5xmIQJG8sYAi91:Pip890UPKm9eImsYAi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ZombifyActCtx CreateJobObjectW GetCommProperties GetModuleHandleW GetConsoleAliasesA GetConsoleAliasesLengthA GlobalAlloc LoadLibraryW Sleep SetVolumeMountPointA lstrcpynW GetAtomNameW WritePrivateProfileStringW InterlockedExchange SetLastError GetProcAddress LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomW SetFileApisToANSI OpenJobObjectW FoldStringA GetModuleFileNameA EnumDateFormatsA lstrcatW BuildCommDCBA GetShortPathNameW FindFirstVolumeA FlushFileBuffers CloseHandle CreateFileA GetLastError HeapFree MultiByteToWideChar HeapReAlloc HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW HeapSize

user32

GetProcessDefaultLayout

ole32

CoTaskMemAlloc

Name

.text

Size

180KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

561KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fir

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gewog

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

1cc6b3e73bf4ca46be53bbd8ceb9e2181227bab66d2bad4ea5f8ef939f5f4bd7

kernel32

user32

ole32

generic