cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4

General

Target
cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4
Size 718KB
Sample260826-txd2jasdlf
SHA256 cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4
MD5 19d263142f94a4a10b2fef83ae08e005
SHA1 47f7b89bb0f805f0f5e27edbdad49a7a6d37c607
SHA512 a57bfdaad480861b8769955273f394e0cebd9848fb05bd30aaeba7262b16b2b7fbdd2634b364cc017df110c87ca61c917efe6217879cab2cd89a4e51276679fe
SSDEEP 12288:YNIyZN4+Wv4PLq6Okrh9ZN/hs9DsdZl8jNAUMYM:Y9TPmirh9Zdh648x9+
TLSH
T1F6F4BF227A80C03AD09D02B59889D36DA7F7F9728D3A6483BFD70B5E5E741D34A25A13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4

File Explorer

cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4

.dll 718KB

cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4

IMPHASH aa2340bf328d6b5eabd2d0e4b31754e4
SHA256 cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4
MD5 19d263142f94a4a10b2fef83ae08e005
SHA1 47f7b89bb0f805f0f5e27edbdad49a7a6d37c607
SHA512 a57bfdaad480861b8769955273f394e0cebd9848fb05bd30aaeba7262b16b2b7fbdd2634b364cc017df110c87ca61c917efe6217879cab2cd89a4e51276679fe
SSDEEP 12288:YNIyZN4+Wv4PLq6Okrh9ZN/hs9DsdZl8jNAUMYM:Y9TPmirh9Zdh648x9+
TLSH
T1F6F4BF227A80C03AD09D02B59889D36DA7F7F9728D3A6483BFD70B5E5E741D34A25A13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

618496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\coretech\source\kimi\xml\axe\public\libraries\windows\release\dynamic\axsle\AXSLE.pdb

kernel32

GetProcAddress GetModuleHandleA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetSystemTimeAsFileTime InterlockedIncrement InterlockedDecrement GetLastError HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP LCMapStringA MultiByteToWideChar LCMapStringW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA GetStringTypeW VirtualAlloc LoadLibraryA SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

Name

.text

Size

399KB

Virtual Size

399KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

121KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

22KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

cc416239b04fe0f8938645dc6e38034b5416177777eadf42e5f46e3f250efdc4

kernel32

generic