2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced

Sharing

Copy URL Twitter E-mail

General

Target
2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced
Size 84KB
Sample260806-27643acg39
SHA256 2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced
MD5 a893165b001683f7055d2fb49ad834cc
SHA1 de6b88117bd2903d16dfa3c0cbb0e826280178bd
SHA512 7a8fdd7967de27823f5d1ef62380624fc0827a6b65f2e9ec5933f653b8d2799115d586cb28a28dca6e1b7f1cc928d848308a5e8cc91ea780e6d44353753a99cf
SSDEEP 1536:AlanuUfdncdCg8sgpx0++i7eZ9PETKbG53QH8WsW9lzFA0zzSm6hov:AlanZfdncdCg8db0bEmbG53QH8WsW9lE
TLSH
T18483D501EAD74B26EAF627741CFB92114F77F801AA36970F934840695BB3700ABE5B35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced

File Explorer

2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced

.exe 84KB

2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced

IMPHASH 8c9c37a4cdd97bbc303e7be66327aaf7
SHA256 2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced
MD5 a893165b001683f7055d2fb49ad834cc
SHA1 de6b88117bd2903d16dfa3c0cbb0e826280178bd
SHA512 7a8fdd7967de27823f5d1ef62380624fc0827a6b65f2e9ec5933f653b8d2799115d586cb28a28dca6e1b7f1cc928d848308a5e8cc91ea780e6d44353753a99cf
SSDEEP 1536:AlanuUfdncdCg8sgpx0++i7eZ9PETKbG53QH8WsW9lzFA0zzSm6hov:AlanZfdncdCg8db0bEmbG53QH8WsW9lE
TLSH
T18483D501EAD74B26EAF627741CFB92114F77F801AA36970F934840695BB3700ABE5B35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14082

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection FileTimeToLocalFileTime FileTimeToSystemTime FillConsoleOutputCharacterW FindClose FindFirstFileExW FindNextFileW FindResourceExW FlushFileBuffers FormatMessageW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentVariableW GetFileAttributesW GetFileType GetFullPathNameW GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetSystemTimeAsFileTime GetTickCount GetTimeFormatW HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryW LoadResource LocalFree LockResource QueryPerformanceCounter RtlUnwind SetConsoleCursorPosition SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleW WriteFile

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _unlock _vsnwprintf _wcmdln _wcsdup _wcsicmp abort calloc exit free fwrite malloc memmove realloc signal strncmp towupper vfprintf wcschr wcslen wcsrchr wcstok

Name

.text

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

700B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2cc3403a3011d738a321c62ff2d3362ceedb0d4f47250933bfc80ee69f513ced

kernel32

msvcrt

generic