c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5

Resubmissions

29/06/2025, 16:53

250629-vd4crawnx23

29/06/2025, 16:42

250629-t72kksdk6s3

Sharing

Copy URL Twitter E-mail

General

Target
c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5
Size 18KB
Sample250629-vd4crawnx2
SHA256 c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5
MD5 eaef9e06a655fd8af5b11b972d3450a8
SHA1 35bbfafa5dfda093c0b4c18a761016856c6a1799
SHA512 1b07ad85a209c3b54d772f6cd4a3f4902ae039689dd095e0da2e0bb81393e465b4089f93c8d356be3d75198605b7e146681f2d095c6b8c5c7e8d3fb2d8adc515
SSDEEP 384:F7v+XQ4vJPYLIAJ1SlspBaaLQNpzuuxg:Fz+XQ4vRPDQBxDuy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5

File Explorer

c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5

.exe 18KB

c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5

IMPHASH e7c9b87cd032951f6d7e1e8e4482edec
SHA256 c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5
MD5 eaef9e06a655fd8af5b11b972d3450a8
SHA1 35bbfafa5dfda093c0b4c18a761016856c6a1799
SHA512 1b07ad85a209c3b54d772f6cd4a3f4902ae039689dd095e0da2e0bb81393e465b4089f93c8d356be3d75198605b7e146681f2d095c6b8c5c7e8d3fb2d8adc515
SSDEEP 384:F7v+XQ4vJPYLIAJ1SlspBaaLQNpzuuxg:Fz+XQ4vRPDQBxDuy
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\aaaa\source\repos\BadCat\x64\Release\BadCat.pdb

kernel32

CreateThread GetProcAddress LocalFree GetComputerNameA RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter LoadLibraryA GetLastError FormatMessageW GetTempPathA Sleep SetFilePointer WriteFile ExitProcess GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess RtlCaptureContext

user32

GetAsyncKeyState

wininet

InternetOpenUrlA InternetCloseHandle

ws2_32

getaddrinfo WSACleanup WSAStartup freeaddrinfo inet_ntop

vcruntime140

__C_specific_handler __current_exception memset __current_exception_context memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf ftell fread fopen fclose fseek _set_fmode __p__commode

api-ms-win-crt-time-l1-1-0

_difftime64 strftime _time64 _localtime64

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free

api-ms-win-crt-runtime-l1-1-0

exit _initterm_e _initterm _get_narrow_winmain_command_line _initialize_onexit_table _c_exit _initialize_narrow_environment terminate _configure_narrow_argv _cexit _set_app_type _seh_filter_exe _register_onexit_function _exit _register_thread_local_exe_atexit_callback _crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

c22722265e701d355ff1affdc306fb57162ded59690f15efded6bf7f30de2ba5

kernel32

user32

wininet

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic