01cddc898479dccce3d215de27163673b5d5d75b2ebbdc0f679e5d044919233f[.]exe

General

Target
01cddc898479dccce3d215de27163673b5d5d75b2ebbdc0f679e5d044919233f.exe
Size 1023KB
Sample260528-dtsshsew6m
SHA256 01cddc898479dccce3d215de27163673b5d5d75b2ebbdc0f679e5d044919233f
MD5 21b00885507b17bb51792cbac9cd7d01
SHA1 a8263bb900d757441ee97f73666eb6a381fbead9
SHA512 51cf08f99fc42cb74261f8f9ec7bf4dc8a159b28bd8117baa07cb7a3450b9a0865806f157951471191554ef999ed9f5076e856e0b954976581a617314d0c716c
SSDEEP 24576:YpjxIX0ifL1ql/eTZjJjRyUcx0pJEjO8/Auwdus/xE:YRxIX0ifL1qIjRypCIX/Auwdut
TLSH
T13925E01179C08076DB3321320A68FB759AAEF8B01B2956CF57E81ABE5F385C15B3125F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01cddc898479dccce3d215de27163673b5d5d75b2ebbdc0f679e5d044919233f.exe

File Explorer

01cddc898479dccce3d215de27163673b5d5d75b2ebbdc0f679e5d044919233f.exe

.exe 1023KB

01cddc898479dccce3d215de27163673b5d5d75b2ebbdc0f679e5d044919233f.exe

IMPHASH 285f07c66f98861b92460fa57c11d967
SHA256 01cddc898479dccce3d215de27163673b5d5d75b2ebbdc0f679e5d044919233f
MD5 21b00885507b17bb51792cbac9cd7d01
SHA1 a8263bb900d757441ee97f73666eb6a381fbead9
SHA512 51cf08f99fc42cb74261f8f9ec7bf4dc8a159b28bd8117baa07cb7a3450b9a0865806f157951471191554ef999ed9f5076e856e0b954976581a617314d0c716c
SSDEEP 24576:YpjxIX0ifL1ql/eTZjJjRyUcx0pJEjO8/Auwdus/xE:YRxIX0ifL1qIjRypCIX/Auwdut
TLSH
T13925E01179C08076DB3321320A68FB759AAEF8B01B2956CF57E81ABE5F385C15B3125F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

192024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jmhxmmv48ls1eu\Literally.pdb

kernel32

WaitForSingleObject CloseHandle CreateThread MultiByteToWideChar FormatMessageA GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LocalFree GetLocaleInfoEx LCMapStringEx CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetCurrentThread FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW SetConsoleCtrlHandler HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing