CnC3ModSDK_v5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
CnC3ModSDK_v5.exe
Size 104.4MB
Sample260621-rm688aew2w
SHA256 3adc43986776dbe7881c3691fa75086ec3da5c6ffeff2610f4c4f1daefa90abd
MD5 dc2eec917eb0afc55324c2de70c0653d
SHA1 cac6782c405075901574ed898644c0b54d664421
SHA512 c2badb1640dc4cbef468b5b35da738fc84c984863958e69bf7b484035a6dd5695ae5d4a99eddf0be9d7c612192d23edcf40938a53aea598f6fc1ae87d3fd1db0
SSDEEP 3145728:kG3p4GyqmMPrfmPheyizwIQejJulmUTRkBMAE7YZFOC4+:kq/zPrwhlizw5ejyVjYZFPX
TLSH
T169383341AA919D22FD2F1776D423015132393D790FA78B4B21AEF07824B73E79AC674E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CnC3ModSDK_v5.exe

File Explorer

CnC3ModSDK_v5.exe

.exe 104.4MB

CnC3ModSDK_v5.exe

IMPHASH d3a35c815738cd0a7a55b0310b01bacf
SHA256 3adc43986776dbe7881c3691fa75086ec3da5c6ffeff2610f4c4f1daefa90abd
MD5 dc2eec917eb0afc55324c2de70c0653d
SHA1 cac6782c405075901574ed898644c0b54d664421
SHA512 c2badb1640dc4cbef468b5b35da738fc84c984863958e69bf7b484035a6dd5695ae5d4a99eddf0be9d7c612192d23edcf40938a53aea598f6fc1ae87d3fd1db0
SSDEEP 3145728:kG3p4GyqmMPrfmPheyizwIQejJulmUTRkBMAE7YZFOC4+:kq/zPrwhlizw5ejyVjYZFPX
TLSH
T169383341AA919D22FD2F1776D423015132393D790FA78B4B21AEF07824B73E79AC674E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA VerInstallFileA

kernel32

LoadResource FindResourceA GetModuleHandleA SetErrorMode CreateDirectoryA GetModuleFileNameA CreateFileA InterlockedIncrement InterlockedDecrement QueryPerformanceFrequency CreateEventA CloseHandle WriteFile Sleep ReadFile FreeLibrary RemoveDirectoryA FindClose FindNextFileA DeleteFileA lstrcmpA FindFirstFileA GetTempPathA LeaveCriticalSection EnterCriticalSection CreateThread GetWindowsDirectoryA GetTickCount GetFileAttributesA GetTempFileNameA CreateMutexA WaitForSingleObject ReleaseMutex InitializeCriticalSection DeleteCriticalSection lstrlenW LockResource OpenEventA CreateProcessA GetCurrentThreadId HeapAlloc GetSystemInfo HeapCreate GetFileSize lstrcpynA lstrcatA WritePrivateProfileStringA SetFilePointer GetShortPathNameA GetProcAddress LoadLibraryA GetSystemDefaultLangID MoveFileA FindResourceExA HeapDestroy UnmapViewOfFile MapViewOfFile CreateFileMappingA SizeofResource GetVersion GetStartupInfoA ExitProcess GetCommandLineA DebugBreak HeapReAlloc HeapFree VirtualQuery VirtualProtect SearchPathA ResetEvent QueryPerformanceCounter SystemTimeToFileTime GetCurrentProcess GetCurrentThread IsBadReadPtr RtlUnwind lstrcpyA GlobalFree GlobalAlloc GlobalLock GlobalUnlock GetVersionExA CompareStringW CompareStringA WideCharToMultiByte lstrlenA GetLastError SetLastError lstrcmpiA GetPrivateProfileIntA GetPrivateProfileStringA MultiByteToWideChar GetStringTypeA GetStringTypeW SetEvent

user32

MoveWindow KillTimer DestroyWindow GetWindowTextA SetTimer SetWindowRgn GetDesktopWindow DialogBoxIndirectParamA SetActiveWindow LoadStringA SetWindowTextA GetDlgItem SendMessageA SetDlgItemTextA LoadIconA GetWindowRect SystemParametersInfoA SetWindowPos wsprintfA MsgWaitForMultipleObjects PeekMessageA CharLowerBuffA MessageBoxA EndDialog CharNextA CharUpperA PostThreadMessageA CreateDialogIndirectParamA SetForegroundWindow GetMessageA IsDialogMessageA TranslateMessage DispatchMessageA GetDC ReleaseDC ShowWindow ScreenToClient

gdi32

GetTextExtentPoint32A LPtoDP DeleteObject CreateFontIndirectA GetObjectA

advapi32

RegCreateKeyExA GetTokenInformation AllocateAndInitializeSid OpenThreadToken EqualSid FreeSid RegCloseKey RegOpenKeyExA RegSetValueExA OpenProcessToken RegDeleteKeyA RegEnumKeyExA RegQueryValueExA RegOpenKeyA RegQueryValueA

shell32

SHGetPathFromIDListA SHGetMalloc SHGetSpecialFolderLocation

ole32

CoCreateGuid CoCreateInstance CoRevokeClassObject CoRegisterClassObject StringFromCLSID CoTaskMemFree StringFromGUID2 GetRunningObjectTable CoTaskMemAlloc CoMarshalInterThreadInterfaceInStream CoReleaseMarshalData CoInitialize CoGetInterfaceAndReleaseStream CoUninitialize

oleaut32

RegisterTypeLi LoadTypeLi LoadRegTypeLi SysFreeString VariantCopy SysAllocStringLen SysAllocString SysStringLen VariantClear

lz32

LZOpenFileA LZCopy LZClose