cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0

General

Target
cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0
Size 216KB
Sample260810-sbcqxa1emb
SHA256 cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0
MD5 7155b02f03f559c8870aa60f436d5f08
SHA1 a60cec30ff53fb1a9003b3f9fb99d64c23563fba
SHA512 747cc28040f457d07197d5ca1d54d923526613b62b429afad717fd023477b58f50cf16fca5bcdd3cfa41abe836630025503f85afd6a4c5b6b51e1d2bc3315e6b
SSDEEP 3072:XzRk6ZvS0KDKRmkQXMVRAgv7Mh+3ImL2lQBV+UdE+rECWp7hKOP3O:jC6o0PRmvXMVfzcqBV+UdvrEFp7hKOW
TLSH
T1EA24BE027281C3F9C19914393429D73149FAA63D4BFA90C7F71129F99F2C6D39A6931E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0

File Explorer

cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0

.dll 216KB

cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0

IMPHASH 9ade5c162491aa66e606d88ce5db11b9
SHA256 cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0
MD5 7155b02f03f559c8870aa60f436d5f08
SHA1 a60cec30ff53fb1a9003b3f9fb99d64c23563fba
SHA512 747cc28040f457d07197d5ca1d54d923526613b62b429afad717fd023477b58f50cf16fca5bcdd3cfa41abe836630025503f85afd6a4c5b6b51e1d2bc3315e6b
SSDEEP 3072:XzRk6ZvS0KDKRmkQXMVRAgv7Mh+3ImL2lQBV+UdE+rECWp7hKOP3O:jC6o0PRmvXMVfzcqBV+UdvrEFp7hKOW
TLSH
T1EA24BE027281C3F9C19914393429D73149FAA63D4BFA90C7F71129F99F2C6D39A6931E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

56049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\workspace\WinToHDD\Output\Win32\Release\intl.pdb

kernel32

EnumResourceLanguagesW GetThreadLocale GetProcAddress GetLastError GetLocaleInfoA GetACP GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFileType HeapReAlloc MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InterlockedDecrement GetCPInfo WideCharToMultiByte GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess IsDebuggerPresent Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapCreate HeapDestroy VirtualFree DeleteCriticalSection VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetOEMCP IsValidCodePage LCMapStringA LCMapStringW SetStdHandle SetHandleCount GetStartupInfoA RtlUnwind CloseHandle GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSectionAndSpinCount CompareStringA CompareStringW SetEnvironmentVariableA GetTimeZoneInformation SetFilePointer ReadFile CreateFileA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize SetEndOfFile GetProcessHeap GetDriveTypeA GetFullPathNameA GetCurrentDirectoryA GetModuleHandleA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

cda81a57ba513d130a9f4ff4189fdef38a46c464850d37c062776bfe44cd6ff0

kernel32

advapi32

generic