3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1[.]exe

General

Target
3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1.exe
Size 237KB
Sample240720-leldwszckc
SHA256 3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1
MD5 b31900ffd17c8b2ecfaa9b7b6f4cdca3
SHA1 c53316dad42a3aceb3154353791d0f0ae1fd819e
SHA512 6026ea3e33779b87ffad20d7cde3f81b7ea58a5c68fc163a61ec2b0218f3e5be9756b2a81745cd3bafdde1033a84bc70f00db9b8cfab670bc500b53f2c6cdd78
SSDEEP 3072:HYK1fQ0Lk53YKJCegjO/6EdjbTdDCNJ9b0BjxirY4Z4g2tnn:HYK1UmUCegjO/RXBGnb0xAr6n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1.exe

File Explorer

3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1.exe

.exe 237KB

3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1.exe

IMPHASH 9fa45476e477c6919d1122378d8053e3
SHA256 3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1
MD5 b31900ffd17c8b2ecfaa9b7b6f4cdca3
SHA1 c53316dad42a3aceb3154353791d0f0ae1fd819e
SHA512 6026ea3e33779b87ffad20d7cde3f81b7ea58a5c68fc163a61ec2b0218f3e5be9756b2a81745cd3bafdde1033a84bc70f00db9b8cfab670bc500b53f2c6cdd78
SSDEEP 3072:HYK1fQ0Lk53YKJCegjO/6EdjbTdDCNJ9b0BjxirY4Z4g2tnn:HYK1UmUCegjO/RXBGnb0xAr6n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEndOfFile LocalCompact CreateHardLinkA GetModuleHandleW GetProcessHeap EnumResourceTypesA GlobalAlloc GetSystemDirectoryW LoadLibraryW IsProcessInJob AssignProcessToJobObject IsBadWritePtr GetLastError SetLastError GetProcAddress IsBadHugeWritePtr VerLanguageNameA FindClose LoadLibraryA SetConsoleCtrlHandler AddAtomW CreateEventW GlobalHandle GetModuleFileNameA GetOEMCP GlobalUnWire HeapSetInformation EnumResourceNamesA GetCurrentThreadId Module32NextW GetDiskFreeSpaceExA ReadConsoleInputW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle SetFilePointer HeapReAlloc WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetCommandLineW GetStartupInfoW GetCPInfo RaiseException RtlUnwind HeapAlloc LCMapStringW IsProcessorFeaturePresent HeapCreate ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW HeapSize GetACP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale CreateFileW

user32

ChangeMenuW GetMessageExtraInfo CharUpperBuffA SetCursorPos SetUserObjectSecurity SetCaretPos GetCaretBlinkTime SetClipboardViewer

Name

.text

Size

142KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

47KB

Virtual Size

28.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wiwo

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jofovub

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lawozuz

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3cc5509318b88990ff3c137b65e94cfe0cc6759a16180c849584b0345b345ef1.exe

kernel32

user32

generic