cbc5ce28b1925b070284c6cb443ef9197ed6d78d3d8b891189e7d103003cf8c0[.]exe

General

Target
cbc5ce28b1925b070284c6cb443ef9197ed6d78d3d8b891189e7d103003cf8c0.exe
Size 790KB
Sample240725-gqw8basdlr
SHA256 cbc5ce28b1925b070284c6cb443ef9197ed6d78d3d8b891189e7d103003cf8c0
MD5 f82f912af9e8977168720c1145a09e77
SHA1 ded1c0a04f4e8097ae3f075ddb216ea54d1c3bdd
SHA512 16745b1239443aa2476973afb8128d54e9c7aa33c817b27ebf24103da60b9cab1be420adfb1ccefa1a99f5444526fa71ef762cf7c75b9e492836412b4d93f26b
SSDEEP 12288:MzQh1cG6b40zotvxo6x5BC0bh9aU0glNGlcsu9G3+Hwm1e9tsS/0:MEh1cJkNxp5DaUPnLz89D/0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbc5ce28b1925b070284c6cb443ef9197ed6d78d3d8b891189e7d103003cf8c0.exe

File Explorer

cbc5ce28b1925b070284c6cb443ef9197ed6d78d3d8b891189e7d103003cf8c0.exe

.exe 790KB

cbc5ce28b1925b070284c6cb443ef9197ed6d78d3d8b891189e7d103003cf8c0.exe

IMPHASH 3a09809e2f82aed7962ea0c7c3c640d3
SHA256 cbc5ce28b1925b070284c6cb443ef9197ed6d78d3d8b891189e7d103003cf8c0
MD5 f82f912af9e8977168720c1145a09e77
SHA1 ded1c0a04f4e8097ae3f075ddb216ea54d1c3bdd
SHA512 16745b1239443aa2476973afb8128d54e9c7aa33c817b27ebf24103da60b9cab1be420adfb1ccefa1a99f5444526fa71ef762cf7c75b9e492836412b4d93f26b
SSDEEP 12288:MzQh1cG6b40zotvxo6x5BC0bh9aU0glNGlcsu9G3+Hwm1e9tsS/0:MEh1cJkNxp5DaUPnLz89D/0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1069056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pozob\yebakonuc85\dezixa\pojeyovazal_lawinovopo\xajoluvi.pdb

kernel32

SetConsoleTextAttribute MoveFileExW CreateDirectoryExA FreeEnvironmentStringsA GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW CreateDirectoryExW LoadLibraryW LeaveCriticalSection WriteConsoleW GetBinaryTypeA GetMailslotInfo lstrlenW ReplaceFileA GetConsoleAliasesW GetStdHandle AllocConsole GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA WriteConsoleA GetProcessWorkingSetSize SetCalendarInfoW MoveFileA FindFirstChangeNotificationA QueueUserWorkItem VirtualProtect GetCPInfoExA InterlockedPushEntrySList GetLastError SetFilePointer HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle FlushFileBuffers GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

Sharing