4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93

General

Target
4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93
Size 103KB
Sample260825-2evwbszcnd
SHA256 4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93
MD5 aefb840b0b8b8697fdaf48da8aca4c33
SHA1 8b5f40a06496ce275d26c547eeb23fbb504f9a34
SHA512 0167d95a09b860ac30699e06c79f584ad08dfcf5a4a6d17c3796292e60d9c587573b37deda8c2464579db9168de1af088bd3091b94b3cc6164755f1b77ecd06d
SSDEEP 3072:UoJi+hIQZ6CdBcFNd6Ci26CQk6Ciphi26CNk6Cd+T9agg8alRji:PDaggY
TLSH
T1EBA39B1267FA0144F9F3AB7899BA51526B3B7D51AB34C28F029D540E0FB3E90D974B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93

File Explorer

4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93

.exe 103KB

4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93

IMPHASH 9aeba4df58a4089d1eeaa474e3398def
SHA256 4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93
MD5 aefb840b0b8b8697fdaf48da8aca4c33
SHA1 8b5f40a06496ce275d26c547eeb23fbb504f9a34
SHA512 0167d95a09b860ac30699e06c79f584ad08dfcf5a4a6d17c3796292e60d9c587573b37deda8c2464579db9168de1af088bd3091b94b3cc6164755f1b77ecd06d
SSDEEP 3072:UoJi+hIQZ6CdBcFNd6Ci26CQk6Ciphi26CNk6Cd+T9agg8alRji:PDaggY
TLSH
T1EBA39B1267FA0144F9F3AB7899BA51526B3B7D51AB34C28F029D540E0FB3E90D974B23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

17456

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

R:\buildbot\output-VS-amd64\msvc_pdb\replace.pdb

msvcrt

__C_specific_handler _vsnwprintf _wgetdcwd malloc memcpy __setusermatherr _amsg_exit __wgetmainargs __set_app_type exit _cexit _fpreset _initterm __winitenv _wcmdln signal towupper __lconv_init free _wcsupr wcsncmp wcsncat memset iswctype wcslen wcscpy wcscmp wcschr wcscat

kernel32

HeapFree DeleteCriticalSection LoadLibraryW GetModuleHandleA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId Sleep SetUnhandledExceptionFilter GetStartupInfoW LockResource LoadResource GetProcAddress GetFileType FindResourceExW CloseHandle CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetCurrentDirectoryW GetFileAttributesW GetFileTime GetFullPathNameW GetLastError GetStdHandle ReadFile SetFileAttributesW SetFileTime VirtualAlloc VirtualFree WriteFile SetConsoleCtrlHandler GetConsoleCP GetConsoleMode ReadConsoleInputW SetConsoleMode MultiByteToWideChar InitializeCriticalSection EnterCriticalSection FormatMessageW GetProcessHeap HeapAlloc TlsGetValue LeaveCriticalSection LocalFree SetLastError GetConsoleOutputCP WriteConsoleW WideCharToMultiByte __chkstk

Sharing

General

Malware Config

Signatures

File Explorer

4cfef8856e6d8bb4ca045da4da1ccc0a2cb22ba79387c122d8c782f837d32b93

msvcrt

kernel32

generic