c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05

General

Target
c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05
Size 727KB
Sample241111-adbbraybra
SHA256 c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05
MD5 3025fa14cd73acdd7fa83c6c1749e730
SHA1 0c0fe30ab4c67a05b22e5828c44470150adaba31
SHA512 309a5ab55e7e5a22932b514568a7f9a9af4e4559b7d22e62df0301648eb07f7709cd8f24bfb314256c1f5cf4687c9c12e80681191abdc1161895f2bd07dc6ede
SSDEEP 12288:bUncFmjm+9WPtD3BDyTNqHJ1zWPQU7ICRsUb5bmybnJ9kK2vxR:bqjj4BuRy1WYCRsUb57i
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05

File Explorer

c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05

.exe 727KB

c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05

IMPHASH 30d15c7b3cce8f8931262599cc59559f
SHA256 c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05
MD5 3025fa14cd73acdd7fa83c6c1749e730
SHA1 0c0fe30ab4c67a05b22e5828c44470150adaba31
SHA512 309a5ab55e7e5a22932b514568a7f9a9af4e4559b7d22e62df0301648eb07f7709cd8f24bfb314256c1f5cf4687c9c12e80681191abdc1161895f2bd07dc6ede
SSDEEP 12288:bUncFmjm+9WPtD3BDyTNqHJ1zWPQU7ICRsUb5bmybnJ9kK2vxR:bqjj4BuRy1WYCRsUb57i
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW CopyFileExW GetStringTypeA _llseek LocalCompact EnumCalendarInfoW VerSetConditionMask GetCurrentActCtx SetDefaultCommConfigW WaitForSingleObject WriteConsoleInputA SetEvent GetModuleHandleW EnumTimeFormatsW InitializeCriticalSection GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA GetConsoleAliasW WritePrivateProfileSectionW TerminateProcess lstrcmpW GlobalUnlock SetCurrentDirectoryA GetCPInfoExW OpenMutexW IsDBCSLeadByteEx SetLastError GetProcAddress PeekConsoleInputW SearchPathA OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW AddAtomW GlobalGetAtomNameW AddAtomA EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FreeEnvironmentStringsW FindNextFileW SetCalendarInfoA GetWindowsDirectoryW DeleteFileW GetCurrentProcessId EnumCalendarInfoExA SetStdHandle WriteConsoleW GetLastError MoveFileA HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW LCMapStringW MultiByteToWideChar GetStringTypeW HeapFree Sleep GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuW

Sharing

General

Malware Config

Signatures

File Explorer

c0d646bb8d3fce2ea1160529ae90c56ab205c18a1127b0a5b18270f1c92d2e05

kernel32

user32

generic