socd_cleaner[.]exe

General

Target
socd_cleaner.exe
Size 152KB
Sample260806-cmp8dacj6t
SHA256 713d7ef8cb4d9232551cddd2782b35c5d8b66ea6f550c154928557e780d2505d
MD5 6d67dac23832cc767751a283ca6ae406
SHA1 7ffcd1ae41ad8837b4e61ed707ec664eb3e07da4
SHA512 d296b8b33e35b1b6b2e468c2b5d3845cf2e7059fe6b3c8379621686bed2f38543eed164e919416e1eb1a8121fd981cea3a2a2387dd0736a5b939d0a67c624d40
SSDEEP 3072:/ecpdahZA721Rz7gKLPGIR2wQxjRbd138O8g:7YA78hc0PDR2XZ
TLSH
T16EE37C57B7A530F9E4778239C8514606E772B8720721DB5F07A8137B6F232A09E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
socd_cleaner.exe

File Explorer

socd_cleaner.exe

.exe 152KB

socd_cleaner.exe

IMPHASH e8eb2df32e872fe0b1124a29f0c20765
SHA256 713d7ef8cb4d9232551cddd2782b35c5d8b66ea6f550c154928557e780d2505d
MD5 6d67dac23832cc767751a283ca6ae406
SHA1 7ffcd1ae41ad8837b4e61ed707ec664eb3e07da4
SHA512 d296b8b33e35b1b6b2e468c2b5d3845cf2e7059fe6b3c8379621686bed2f38543eed164e919416e1eb1a8121fd981cea3a2a2387dd0736a5b939d0a67c624d40
SSDEEP 3072:/ecpdahZA721Rz7gKLPGIR2wQxjRbd138O8g:7YA78hc0PDR2XZ
TLSH
T16EE37C57B7A530F9E4778239C8514606E772B8720721DB5F07A8137B6F232A09E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

GetKeyNameTextW DispatchMessageA TranslateMessage GetMessageW CheckRadioButton RegisterClassExW LoadCursorA LoadIconA SetWinEventHook DefWindowProcW SetFocus PostQuitMessage GetWindowThreadProcessId GetForegroundWindow UnhookWindowsHookEx SetWindowsHookExA MapVirtualKeyW SendInput CallNextHookEx CreateWindowExW wsprintfW MessageBoxA

shlwapi

PathStripPathA

kernel32

TlsSetValue WriteConsoleW SetEndOfFile HeapReAlloc HeapSize GetFileSizeEx ReadConsoleW ReadFile SetFilePointerEx CreateFileW FlushFileBuffers GetProcessHeap GetStringTypeW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetLastError ExitProcess OpenProcess QueryFullProcessImageNameA CloseHandle GetModuleHandleA FreeConsole QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW FindClose RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType SetStdHandle GetConsoleCP GetConsoleMode

Resubmissions

Sharing