ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a

Sharing

Copy URL Twitter E-mail

General

Target
ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a
Size 373KB
Sample241112-1ercgasaje
SHA256 ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a
MD5 f2a75fb0329cb16ae97544c4393b5f8d
SHA1 b6cd4a095b6cba9755825b9fcb6d33039150ddf5
SHA512 2b8da932aa96b872ac49d41f14bc9c08444ab5f903ecaef6a45145ab6126f0d24a2117746bb37d3544f6fd38cd5b53af63a0d7260eadfe43e88243e6ab3a47e7
SSDEEP 6144:8fC9GB4O2eVC3jCGtct0CVCt6bEPEqzjRbgCOLN:8T2MCOGySCVREP4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a

File Explorer

ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a

.exe 373KB

ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a

IMPHASH 6c1722e35f84eec8d4603956edc22054
SHA256 ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a
MD5 f2a75fb0329cb16ae97544c4393b5f8d
SHA1 b6cd4a095b6cba9755825b9fcb6d33039150ddf5
SHA512 2b8da932aa96b872ac49d41f14bc9c08444ab5f903ecaef6a45145ab6126f0d24a2117746bb37d3544f6fd38cd5b53af63a0d7260eadfe43e88243e6ab3a47e7
SSDEEP 6144:8fC9GB4O2eVC3jCGtct0CVCt6bEPEqzjRbgCOLN:8T2MCOGySCVREP4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

77909

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\BEAUREGARD\Music\ftpclient_demo_mfc\FtpClient_Demo_Mfc\Release\FTPexample.pdb

kernel32

HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree VirtualAlloc HeapReAlloc ExitProcess HeapSize VirtualFree HeapCreate GetStdHandle GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP RaiseException SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetLocaleInfoW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetSystemTimeAsFileTime RtlUnwind SetErrorMode CreateFileA FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringA GetOEMCP GetCPInfo TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GetModuleHandleW GlobalFlags InterlockedDecrement GetModuleFileNameW GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA InterlockedExchange lstrcmpA GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary CompareStringA lstrcmpW GetVersionExA GlobalAlloc MultiByteToWideChar lstrlenA GlobalLock GlobalUnlock GlobalFree Sleep FormatMessageA LocalFree GetLastError SetLastError GetModuleHandleA LoadLibraryA GetModuleHandleExA GetProcAddress GetCurrentProcess WideCharToMultiByte FindResourceA LoadResource LockResource GetConsoleMode SizeofResource

user32

UnregisterClassA DestroyMenu LoadCursorA GetSysColorBrush ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetWindowThreadProcessId SetCursor GetMessageA GetCursorPos ValidateRect PostQuitMessage ShowWindow SetWindowTextA SetMenuItemBitmaps GetMenuCheckMarkDimensions ModifyMenuA EnableMenuItem CheckMenuItem WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus GetLastActivePopup GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints GetKeyState SetMenu SetForegroundWindow IsWindowVisible PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindowTextA RegisterWindowMessageA GetWindow GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetActiveWindow DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent LoadBitmapA PeekMessageA TranslateMessage DispatchMessageA GetSystemMetrics LoadIconA GetClientRect IsIconic EnableWindow SendMessageA GetForegroundWindow

gdi32

DeleteDC GetStockObject RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA GetDeviceCaps DeleteObject SetMapMode RestoreDC SaveDC CreateBitmap SetBkColor SetTextColor GetClipBox TextOutA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathFindExtensionA

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

ddf65ad8954911710837af34633d784e1db62e46621a48fcea09db002ec8c84a

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

generic