cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048

Sharing

Copy URL Twitter E-mail

General

Target
cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048
Size 244KB
Sample260811-e76f7swbpd
SHA256 cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048
MD5 38c34dd51c5303d7108e8a4be9898bb2
SHA1 8988f623ad8134aabee2d5b85b968885a08c73ff
SHA512 33922a41e52eb1038ecffaff221d01d84d53c31ae343e02ec94edcaeda409fcd32beb8776c90a006454129a202e887a41cbb597dbd9295c4b3759a813565418b
SSDEEP 3072:ESVi4Q4hqCWJUFL7aWI7QUm+32AiHyXqfStWTItC3:TigqCWJUFLU7JlmkXqDIS
TLSH
T194345D13968C7CE6E03A0271ABBB47D9D71CDD611795D0CFA2C4198A86BD4E37A323C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048

File Explorer

cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048

.exe 244KB

cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048

IMPHASH 3e1fe2bfd3d87b761485ef0d91d23424
SHA256 cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048
MD5 38c34dd51c5303d7108e8a4be9898bb2
SHA1 8988f623ad8134aabee2d5b85b968885a08c73ff
SHA512 33922a41e52eb1038ecffaff221d01d84d53c31ae343e02ec94edcaeda409fcd32beb8776c90a006454129a202e887a41cbb597dbd9295c4b3759a813565418b
SSDEEP 3072:ESVi4Q4hqCWJUFL7aWI7QUm+32AiHyXqfStWTItC3:TigqCWJUFLU7JlmkXqDIS
TLSH
T194345D13968C7CE6E03A0271ABBB47D9D71CDD611795D0CFA2C4198A86BD4E37A323C6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

108366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\workspace\testVc\testAudioLoopback\testAudioLoopback\Release\testAudioLoopback.pdb

kernel32

InitializeCriticalSectionEx CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW GetProcAddress DeleteCriticalSection GetModuleHandleW WideCharToMultiByte GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle ReleaseSemaphore OutputDebugStringA InitializeCriticalSection WaitForSingleObject GetCurrentThreadId Sleep CloseHandle GetCurrentProcessId CreateSemaphoreW GetSystemTimeAsFileTime CreateDirectoryA CreateEventExW WriteFile TerminateProcess WaitForMultipleObjects GetProcessId K32GetModuleFileNameExW SetFilePointer LeaveCriticalSection CreateFileW OpenProcess ProcessIdToSessionId FormatMessageW SetEvent LoadLibraryW K32EnumProcesses LocalFree CreateProcessW K32EnumProcessModules lstrcmpiW FlushFileBuffers InitializeSListHead QueryPerformanceCounter GetStartupInfoW GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive OutputDebugStringW IsDebuggerPresent EnterCriticalSection LocalAlloc GetModuleFileNameA

user32

GetWindowLongW GetMessageW DefWindowProcW DestroyWindow CreateWindowExW EndPaint BeginPaint UpdateWindow DialogBoxParamW PostQuitMessage GetDlgItem SendMessageA LoadCursorW LoadIconW TranslateMessage TranslateAcceleratorW MessageBoxA DispatchMessageW ShowWindow LoadStringW LoadAcceleratorsW RegisterClassExW EndDialog

shell32

ShellExecuteExW

ole32

CoCreateFreeThreadedMarshaler CoUninitialize CoInitializeEx

msvcp140

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?width@ios_base@std@@QAE_J_J@Z ?width@ios_base@std@@QBE_JXZ ?flags@ios_base@std@@QBEHXZ ?good@ios_base@std@@QBE_NXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?_Throw_Cpp_error@std@@YAXH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_function_call@std@@YAXXZ _Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_join ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?uncaught_exception@std@@YA_NXZ ?_Xlength_error@std@@YAXPBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPBD@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

shlwapi

PathIsDirectoryA

vcruntime140

_CxxThrowException __current_exception_context __current_exception _except_handler4_common memmove __CxxFrameHandler3 __std_exception_destroy __std_exception_copy _purecall memchr memcpy memset memcmp

api-ms-win-crt-time-l1-1-0

_localtime64_s _mktime64 _time64

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _c_exit _register_thread_local_exe_atexit_callback _initialize_wide_environment _configure_wide_argv _initterm exit _invoke_watson _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _controlfp_s _initterm_e _initialize_onexit_table terminate _beginthreadex _exit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode fread __stdio_common_vsnprintf_s ftell __stdio_common_vsprintf fwrite __stdio_common_vfprintf fopen __acrt_iob_func fseek fflush __stdio_common_vswprintf_s fclose

api-ms-win-crt-filesystem-l1-1-0

_access remove

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sharing

General

Malware Config

Signatures

File Explorer

cfe917c21d966f0c64f501f76f1e572cd7f75a2bfac99e8d699c13021615b048

kernel32

user32

shell32

ole32

msvcp140

shlwapi

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic