cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64

Sharing

Copy URL Twitter E-mail

General

Target
cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64
Size 68KB
Sample260901-2xe8lacl8x
SHA256 cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64
MD5 a8578bd6b5514dbed92cb7930290933a
SHA1 0b4b73c5d0ff031578107139b49ac4131b428439
SHA512 0f03b885ce0fa9cc83fa323385e796af1ceec14a45764f250c8fd960902bd745acdffa01a9e8325b383cc842b97956f57e2d8920b21e91739d206d088f7c601a
SSDEEP 1536:Xw60RuJPQwR9E5poZPeSfWY6Vy7S+V+c3xb:AHRCPQ62LYE+Y
TLSH
T10063C612FFF90926E6F56634A87B0229C6B7F911CE7C920F9304D0282DD2BF15AD4796
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64

File Explorer

cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64

.exe 68KB

cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64

IMPHASH 8ec750d5888a801dd1d7fa787ef08be8
SHA256 cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64
MD5 a8578bd6b5514dbed92cb7930290933a
SHA1 0b4b73c5d0ff031578107139b49ac4131b428439
SHA512 0f03b885ce0fa9cc83fa323385e796af1ceec14a45764f250c8fd960902bd745acdffa01a9e8325b383cc842b97956f57e2d8920b21e91739d206d088f7c601a
SSDEEP 1536:Xw60RuJPQwR9E5poZPeSfWY6Vy7S+V+c3xb:AHRCPQ62LYE+Y
TLSH
T10063C612FFF90926E6F56634A87B0229C6B7F911CE7C920F9304D0282DD2BF15AD4796
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ntdll

vDbgPrintExWithPrefix

kernel32

CloseHandle CompareFileTime CreateToolhelp32Snapshot DeleteCriticalSection EnterCriticalSection FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentVariableA GetLastError GetModuleHandleA GetModuleHandleW GetOEMCP GetProcAddress GetProcessTimes GetStartupInfoW GetStdHandle GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryW LocalAlloc LocalFree LocalReAlloc OpenProcess Process32FirstW Process32NextW QueryPerformanceCounter SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleW WriteFile

msvcrt

__dllonexit __lconv_init __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _fpreset _initterm _iob _lock _onexit _snprintf _unlock _vsnprintf _wcmdln _wcsicmp abort bsearch calloc exit free fwrite iswctype malloc memcmp memmove memset realloc signal sprintf strchr strcmp strcpy strcspn strncmp vfprintf wcstol

user32

EnumWindows GetWindowThreadProcessId LoadStringW PostMessageW wsprintfW

Name

.text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rossym

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cdc819a61d009625f052d7a0da46bb03dbd109a58d57647c48d72eedd0398f64

ntdll

kernel32

msvcrt

user32

generic