c30e2baf61f34324ccbd0b0168def45e[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
c30e2baf61f34324ccbd0b0168def45e.exe
Size 306KB
Sample250101-lbbehstlej
SHA256 0ac763391fc56711f3df8e6d6c047bd299c2b7052a69fb66a43fcab1c1b74826
MD5 c30e2baf61f34324ccbd0b0168def45e
SHA1 9ae0549752733b79f244fccb6572792dacd68b50
SHA512 c97c413b36e96f394d4a4a7a965881910dceb22b59ebdb273f306e4db06d322318d6ace1ea06b660c077e516641ff21216a769b921364a24fe7d00eb98614721
SSDEEP 6144:7wQIfxC1Hqu69oRYT5hpjhFRIb9gyUiwd:hIfxCFqboRo5jhFCgy9Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c30e2baf61f34324ccbd0b0168def45e.exe

File Explorer

c30e2baf61f34324ccbd0b0168def45e.exe

.exe 306KB

c30e2baf61f34324ccbd0b0168def45e.exe

IMPHASH 8938b6606fdcc703cae7999268748e55
SHA256 0ac763391fc56711f3df8e6d6c047bd299c2b7052a69fb66a43fcab1c1b74826
MD5 c30e2baf61f34324ccbd0b0168def45e
SHA1 9ae0549752733b79f244fccb6572792dacd68b50
SHA512 c97c413b36e96f394d4a4a7a965881910dceb22b59ebdb273f306e4db06d322318d6ace1ea06b660c077e516641ff21216a769b921364a24fe7d00eb98614721
SSDEEP 6144:7wQIfxC1Hqu69oRYT5hpjhFRIb9gyUiwd:hIfxCFqboRo5jhFCgy9Y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25107

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesW GetLastError SetLastError GetProcAddress CreateNamedPipeA CreateMemoryResourceNotification LoadLibraryA AddAtomW FreeEnvironmentStringsW VirtualProtect GetCurrentDirectoryA SetProcessShutdownParameters LocalFree GetStartupInfoW CompareStringW CompareStringA CloseHandle CreateFileA GetTimeZoneInformation GetLocaleInfoW FreeLibrary SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA InitializeCriticalSectionAndSpinCount SetFilePointer IsValidLocale ExitThread FindResourceExA GetSystemTimes GetTickCount FindFirstChangeNotificationW GetCPInfo GlobalMemoryStatus SetEnvironmentVariableA GetComputerNameA EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapAlloc HeapCreate HeapDestroy VirtualFree FatalAppExitA VirtualAlloc HeapReAlloc WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA SetConsoleCtrlHandler HeapSize GetTimeFormatA GetDateFormatA GetModuleHandleA

user32

UnloadKeyboardLayout GetNextDlgGroupItem LoadMenuIndirectA BeginPaint LoadIconW GetRegisteredRawInputDevices AppendMenuW PeekMessageA MapVirtualKeyExW DlgDirSelectComboBoxExW OpenClipboard GetClipboardSequenceNumber CallMsgFilterA InsertMenuItemW

gdi32

SetPixel SetRectRgn CreateCompatibleDC CreateDiscardableBitmap StretchBlt

advapi32

LookupPrivilegeNameA OpenEventLogA

shell32

ExtractAssociatedIconA ShellAboutA DragQueryFileW ExtractIconExA ShellExecuteA

Name

.text

Size

247KB

Virtual Size

247KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mysec3

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c30e2baf61f34324ccbd0b0168def45e.exe

kernel32

user32

gdi32

advapi32

shell32

generic