dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116

General

Target
dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116
Size 172KB
Sample260729-bd2dlsdc44
SHA256 dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116
MD5 b9e5d4b3ec3443079271ecf46aadf4e4
SHA1 d801e4b3e0cd45cf702d967db345a361eb34b3d1
SHA512 1d57df33a713a5706dd829fb8efb1c42c28164c46d27f9473579c841ef5f87c58216422464a6378558c133da665af30f389d959c90af0de8e7732e7868faae07
SSDEEP 1536:Ru55whUPKC4gcNqg+s50nEPbX7f4eJaZ6w3CZdup7Md4xvEz:g58UCrN+sbPbX7f4eJG6w3Cap7Mr
TLSH
T11704799263FA4204FAF37F7899B812A55F3E7C55AE38C58E11A1401D89B2E90DD70B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116

File Explorer

dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116

.exe 172KB

dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116

IMPHASH 7ea226efe96235b6e6f766c4503442c4
SHA256 dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116
MD5 b9e5d4b3ec3443079271ecf46aadf4e4
SHA1 d801e4b3e0cd45cf702d967db345a361eb34b3d1
SHA512 1d57df33a713a5706dd829fb8efb1c42c28164c46d27f9473579c841ef5f87c58216422464a6378558c133da665af30f389d959c90af0de8e7732e7868faae07
SSDEEP 1536:Ru55whUPKC4gcNqg+s50nEPbX7f4eJaZ6w3CZdup7Md4xvEz:g58UCrN+sbPbX7f4eJG6w3Cap7Mr
TLSH
T11704799263FA4204FAF37F7899B812A55F3E7C55AE38C58E11A1401D89B2E90DD70B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

CharUpperBuffW LoadStringW

ucrtbase

__acrt_iob_func __p___argc __p___wargv __stdio_common_vsprintf _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _strdup _wfopen _wsplitpath _wtol exit fclose feof fgetws free fwrite getenv malloc memcpy memmove memset strchr strcmp strcpy strcspn strlen toupper wcschr wcscpy wcslen wcsrchr wcsstr

kernel32

CloseHandle CompareFileTime CompareStringW CopyFileW CreateDirectoryW CreateFileW FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FormatMessageW GetCommandLineW GetCurrentDirectoryW GetDateFormatW GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileTime GetFullPathNameW GetModuleHandleW GetOEMCP GetProcAddress GetStdHandle GetTickCount GetTimeFormatW HeapAlloc HeapFree HeapReAlloc IsBadStringPtrW LocalFree ReadFile SetFileAttributesW SystemTimeToFileTime WideCharToMultiByte WriteConsoleW WriteFile lstrcmpW

ntdll

_chkstk _vsnprintf

Sharing

General

Malware Config

Signatures

File Explorer

dcfcc63facfe24e4de0ccf42fdaa382c2d9c6e2dda526d092724cabc2407a116

user32

ucrtbase

kernel32

ntdll

generic