cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de

Sharing

Copy URL Twitter E-mail

General

Target
cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de
Size 447KB
Sample260920-3ew9ts1epd
SHA256 cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de
MD5 5fae63a9eca40c32b2867c4838154ceb
SHA1 938a69b0fa128c7e90e4006d950bba3e757b57ed
SHA512 f1751f5d563273811e24c092c27293d1ca3a938627c87c8e29b1579c8f44e2d16fdf56fe9c5d7fd8682eef1c2c01992a3724cbd6355672a4c8f741b237042fbb
SSDEEP 6144:sXyf+/bnQC4lTVN4K3qYp0HWhK0+Sbm61Os+18:sXC+/34TVNx3lqHWhK0+SbmU+18
TLSH
T183A46DD065D88C35E3F6D73074E29623893A6DD22D3B895FF2B432590F786B0D62463A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de

File Explorer

cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de

.exe 447KB

cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de

IMPHASH c5b99cd17c52fa61ed7f12d60666667a
SHA256 cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de
MD5 5fae63a9eca40c32b2867c4838154ceb
SHA1 938a69b0fa128c7e90e4006d950bba3e757b57ed
SHA512 f1751f5d563273811e24c092c27293d1ca3a938627c87c8e29b1579c8f44e2d16fdf56fe9c5d7fd8682eef1c2c01992a3724cbd6355672a4c8f741b237042fbb
SSDEEP 6144:sXyf+/bnQC4lTVN4K3qYp0HWhK0+Sbm61Os+18:sXC+/34TVNx3lqHWhK0+SbmU+18
TLSH
T183A46DD065D88C35E3F6D73074E29623893A6DD22D3B895FF2B432590F786B0D62463A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\LSU-COM-JOB1\tvsu\Output\tvsu.pdb

kernel32

GlobalFree LoadLibraryW LoadResource FindResourceW GlobalLock OpenMutexW GlobalUnlock MulDiv SetUnhandledExceptionFilter DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize GetProcessHeap Process32FirstW SetStdHandle LCMapStringW CompareStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW GlobalAlloc Process32NextW GetLastError Sleep CreateToolhelp32Snapshot FreeResource GetVersionExW WaitForSingleObject CreateMutexW GetCurrentProcess SizeofResource GetCurrentProcessId CreateFileW WriteFile FreeLibrary GetProcAddress CloseHandle GetVersionExA LoadLibraryA OpenProcess GetStringTypeW TerminateProcess FindFirstFileExW WriteConsoleW FindClose GetFileType HeapAlloc HeapFree GetACP GetModuleHandleExW ExitProcess WideCharToMultiByte MultiByteToWideChar GetModuleFileNameW GetStdHandle LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection

user32

GetDesktopWindow PostQuitMessage KillTimer GetClientRect ReleaseDC FindWindowW TranslateMessage SetTimer DispatchMessageW UpdateWindow EndPaint BeginPaint ShowWindow SetWindowLongW LoadStringW GetMessageW CreateDialogParamW DestroyWindow GetDC SetWindowPos MessageBoxW SendMessageW

gdi32

GetDeviceCaps

advapi32

RegCloseKey EqualSid AllocateAndInitializeSid OpenProcessToken FreeSid RegOpenKeyExW RegGetValueW GetUserNameW LookupAccountSidW RegQueryValueExW GetTokenInformation

shell32

ShellExecuteExW

ole32

CreateStreamOnHGlobal

shlwapi

StrCmpW

gdiplus

GdiplusStartup GdiplusShutdown GdipLoadImageFromStream GdipDeleteFont GdipDeleteGraphics GdipCloneBrush GdipCreateFromHDC GdipDrawString GdipFree GdipCreateSolidFill GdipCreateFont GdipDisposeImage GdipDrawImageRectI GdipAlloc GdipDeleteBrush GdipCloneImage GdipCreateFontFamilyFromName GdipDeleteFontFamily

Sharing

General

Malware Config

Signatures

File Explorer

cc39da364b8a91c86f3c170308a99887d9d9c1c985bdff85970171d5d92e13de

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

gdiplus

generic