cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b

Sharing

Copy URL Twitter E-mail

General

Target
cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b
Size 574KB
Sample260709-vwfpeaev5p
SHA256 cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b
MD5 8e89ca99b337345f8ccc31a1f5fba51a
SHA1 2cb48d8d18570721b6f49fe4371872359e27de1f
SHA512 01d5e0e691c97a23525c29519dee8fa3b020eada80620b55b1b5914a8822118da344421e611ca330693685fb35aaa74f8c5a01f0c246df39acf2e603c65ff7d1
SSDEEP 6144:BEWU/35mn/1uMw2wwlrAtfdk73oTqAR8VjDDU418hx5GAlG/PmmCn3JdVWxl2Znd:Bsg1S1rmnwGAwXmZ9w2FnDp
TLSH
T109C47C341AEB895EC1C3587952A61398F2FA8BD41E26D273D532EC2FBF248C53AC1175
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b

File Explorer

cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b

.exe 574KB

cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b

IMPHASH eb4452800f74265f63e1ab7f8ac2122a
SHA256 cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b
MD5 8e89ca99b337345f8ccc31a1f5fba51a
SHA1 2cb48d8d18570721b6f49fe4371872359e27de1f
SHA512 01d5e0e691c97a23525c29519dee8fa3b020eada80620b55b1b5914a8822118da344421e611ca330693685fb35aaa74f8c5a01f0c246df39acf2e603c65ff7d1
SSDEEP 6144:BEWU/35mn/1uMw2wwlrAtfdk73oTqAR8VjDDU418hx5GAlG/PmmCn3JdVWxl2Znd:Bsg1S1rmnwGAwXmZ9w2FnDp
TLSH
T109C47C341AEB895EC1C3587952A61398F2FA8BD41E26D273D532EC2FBF248C53AC1175
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

MessageBoxW MessageBoxA

python311

PyWideStringList_Append Py_DecodeLocale PyUnicode_Format PyUnicode_FromString PyEval_SaveThread PyConfig_InitIsolatedConfig PyConfig_SetArgv Py_Exit PyImport_ImportModule PyErr_NormalizeException Py_ExitStatusException PySys_GetObject _Py_NoneStruct PyConfig_SetString PyTuple_New Py_FinalizeEx PyExc_SystemExit Py_Finalize PyStatus_Exception PyUnicode_Join PyErr_ExceptionMatches PyErr_Fetch PyLong_AsLong PyUnicode_AsWideCharString PyObject_GetAttrString PyWideStringList_Insert _Py_Dealloc PyErr_Clear PyMem_Free PyPreConfig_InitIsolatedConfig PyEval_RestoreThread PyStatus_Error PyMem_RawFree Py_InitializeFromConfig PyConfig_Read Py_PreInitialize PyStatus_Ok PyObject_Str PyConfig_Clear PyStatus_IsError PyMem_RawMalloc PyObject_CallObject

kernel32

TerminateProcess GetModuleFileNameW LoadLibraryExW GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent RtlCaptureContext GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry AddDllDirectory

vcruntime140

__current_exception_context __current_exception __C_specific_handler memcpy memset wcsrchr

api-ms-win-crt-runtime-l1-1-0

__p___wargv terminate _crt_atexit _register_onexit_function _initialize_onexit_table __p___argc _register_thread_local_exe_atexit_callback _c_exit _cexit _set_app_type _exit exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

_wfopen fclose __p__commode _set_fmode fread

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

cd0862dab199337694546eb0cc08330cecdcf25960aff06cfc2340c90c48561b

user32

python311

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic