cd8887d643a551d2217c2cc96eae2b1e78d3008321acd3f18e09ec76595211a6[.]exe

Resubmissions

13/01/2025, 08:09

250113-j16wlstpgz10

13/01/2025, 07:05

250113-hwp7ma1qcv10

13/01/2025, 07:01

250113-htbw8a1pbz10

Sharing

Copy URL Twitter E-mail

General

Target
cd8887d643a551d2217c2cc96eae2b1e78d3008321acd3f18e09ec76595211a6.exe
Size 286KB
Sample250113-j16wlstpgz
SHA256 cd8887d643a551d2217c2cc96eae2b1e78d3008321acd3f18e09ec76595211a6
MD5 7942c3b8f0af43d0f478680cc04d084d
SHA1 1653af407874b3b0264fa3b2518acc54abd65afc
SHA512 9f9607be7bdb4f6e37ba79a1df1c4a6c196464284ef58dc99dd2d61b72975be59d71e77309f1f86d6e7725e1997dbc3617e0befec347ae59c5919035a7788230
SSDEEP 3072:PeRhvJittdsJjPZJ5c4sVeIGAxbjvftIDG543nGgdR2hYi1FEHSR:qhwtCJGA8j3tIS543ndsZ9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd8887d643a551d2217c2cc96eae2b1e78d3008321acd3f18e09ec76595211a6.exe

File Explorer

cd8887d643a551d2217c2cc96eae2b1e78d3008321acd3f18e09ec76595211a6.exe

.exe 286KB

cd8887d643a551d2217c2cc96eae2b1e78d3008321acd3f18e09ec76595211a6.exe

IMPHASH f5326e66b333b59dea4bcbda287fd99f
SHA256 cd8887d643a551d2217c2cc96eae2b1e78d3008321acd3f18e09ec76595211a6
MD5 7942c3b8f0af43d0f478680cc04d084d
SHA1 1653af407874b3b0264fa3b2518acc54abd65afc
SHA512 9f9607be7bdb4f6e37ba79a1df1c4a6c196464284ef58dc99dd2d61b72975be59d71e77309f1f86d6e7725e1997dbc3617e0befec347ae59c5919035a7788230
SSDEEP 3072:PeRhvJittdsJjPZJ5c4sVeIGAxbjvftIDG543nGgdR2hYi1FEHSR:qhwtCJGA8j3tIS543ndsZ9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_SYSTEM

PDB paths

kernel32

GetCurrentDirectoryW FindFirstChangeNotificationA AddAtomA EnumTimeFormatsA FindAtomA CloseHandle ExitProcess GetModuleHandleW GetCommProperties GetThreadSelectorEntry GetCPInfo GetSystemTimeAdjustment GetProcAddress WriteConsoleOutputCharacterA GetLastError FatalExit SetLastError CompareStringW CompareStringA CreateFileA GetLocaleInfoW HeapSize FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA GetTimeZoneInformation LoadLibraryA InterlockedExchange GlobalAlloc LocalFree FreeLibrary SetConsoleCtrlHandler GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection MultiByteToWideChar ReadFile Sleep WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle SetEnvironmentVariableA

user32

PeekMessageA GetRawInputDeviceInfoA ScrollWindowEx UpdateWindow LoadIconW GetNextDlgTabItem GetMonitorInfoW BeginPaint GetParent SetThreadDesktop LookupIconIdFromDirectory

advapi32

ReportEventW

msimg32

TransparentBlt