xdd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
xdd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f.exe
Size 3.1MB
Sample260404-teycfset4w
SHA256 dd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f
MD5 cbdadf7be4f0a628238f77f09bec37cf
SHA1 dbd8ca2f292c24e4d45c2f7c90784d00e516842d
SHA512 583db0657283f95b2424a68369f756778181d648f5dfe6f2453c7a7add74c67f62b6491275808ad4b198694f33fdcbbe6d1963300f7e31358a6c59d158e45e21
SSDEEP 49152:4EtNy31uZUbWeVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B:3N72bWJnLrHp/qKm2/Sb/
TLSH
T11CE58B53EB915AD8E65D0936AF184150D72EF261AAEF2360342C520DCE93387BF61E3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xdd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f.exe

File Explorer

xdd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f.exe

.exe 3.1MB

xdd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f.exe

IMPHASH 30d15c7b3cce8f8931262599cc59559f
SHA256 dd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f
MD5 cbdadf7be4f0a628238f77f09bec37cf
SHA1 dbd8ca2f292c24e4d45c2f7c90784d00e516842d
SHA512 583db0657283f95b2424a68369f756778181d648f5dfe6f2453c7a7add74c67f62b6491275808ad4b198694f33fdcbbe6d1963300f7e31358a6c59d158e45e21
SSDEEP 49152:4EtNy31uZUbWeVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B:3N72bWJnLrHp/qKm2/Sb/
TLSH
T11CE58B53EB915AD8E65D0936AF184150D72EF261AAEF2360342C520DCE93387BF61E3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW CopyFileExW GetStringTypeA _llseek LocalCompact EnumCalendarInfoW VerSetConditionMask GetCurrentActCtx SetDefaultCommConfigW WaitForSingleObject WriteConsoleInputA SetEvent GetModuleHandleW EnumTimeFormatsW InitializeCriticalSection GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW GetFileAttributesA GetConsoleAliasW WritePrivateProfileSectionW TerminateProcess lstrcmpW GlobalUnlock SetCurrentDirectoryA GetCPInfoExW OpenMutexW IsDBCSLeadByteEx SetLastError GetProcAddress PeekConsoleInputW SearchPathA OpenWaitableTimerW LocalAlloc BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW AddAtomW GlobalGetAtomNameW AddAtomA EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FreeEnvironmentStringsW FindNextFileW SetCalendarInfoA GetWindowsDirectoryW DeleteFileW GetCurrentProcessId EnumCalendarInfoExA SetStdHandle WriteConsoleW GetLastError MoveFileA HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EncodePointer DecodePointer IsProcessorFeaturePresent ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime RaiseException FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW LCMapStringW MultiByteToWideChar GetStringTypeW HeapFree Sleep GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuW

Name

.text

Size

111KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

524KB

Virtual Size

39.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

89KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

xJVYqFKY

Size

74KB

Virtual Size

74KB

Characteristics

Name

XRbhnIIC

Size

2KB

Virtual Size

1KB

Characteristics

Name

RddDxfot

Size

2KB

Virtual Size

1KB

Characteristics

Name

qXMMBeOU

Size

7KB

Virtual Size

6KB

Characteristics

Name

omYsdhAB

Size

2.1MB

Virtual Size

2.1MB

Characteristics

Name

rzQvJTkr

Size

64KB

Virtual Size

64KB

Characteristics

Name

LDjrzWUD

Size

4KB

Virtual Size

3KB

Characteristics

Name

emRqBIci

Size

82KB

Virtual Size

82KB

Characteristics

Name

LQgegZkz

Size

4KB

Virtual Size

3KB

Characteristics

Name

eyYrtJLt

Size

78KB

Virtual Size

77KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

xdd90cdf1beb816e372cbfed148243628999c6ac62e2a0239c73093f321b0a31f.exe

kernel32

user32

generic