823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349

Sharing

Copy URL Twitter E-mail

General

Target
823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349
Size 248KB
Sample261007-3l9thaht2n
SHA256 823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349
MD5 742bbb0c0b501fc18333ea89af4e7e86
SHA1 7c78208ee280a3450b537a000ad84a070db7fe28
SHA512 e7bfb0afcee0ea19ca107f44d45b86ae5846fd9258d5d08b0abaf0dd528d5def06fee912f0a68775fa75710e35aad7f153ce316ff45c5b61716f94734c1268e7
SSDEEP 6144:XdNRviPvua6d8q/BWQrAVoRjjnwugf1J7IE:XUnua08q/BWQrAGRjULf3IE
TLSH
T13F447C167AC08531E2731A344CF593B65A7C7C2056318E1F972C366AFA394A2D632F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349

File Explorer

823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349

.exe 248KB

823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349

IMPHASH 279a529b3d26ac3709f0edd7077eeaf7
SHA256 823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349
MD5 742bbb0c0b501fc18333ea89af4e7e86
SHA1 7c78208ee280a3450b537a000ad84a070db7fe28
SHA512 e7bfb0afcee0ea19ca107f44d45b86ae5846fd9258d5d08b0abaf0dd528d5def06fee912f0a68775fa75710e35aad7f153ce316ff45c5b61716f94734c1268e7
SSDEEP 6144:XdNRviPvua6d8q/BWQrAVoRjjnwugf1J7IE:XUnua08q/BWQrAGRjULf3IE
TLSH
T13F447C167AC08531E2731A344CF593B65A7C7C2056318E1F972C366AFA394A2D632F7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7c:94:4d:fe:d7:c7:68:d3:0c:13:bd:47:d3:38:d9:0d:1b:e9:7a:a4:99:06:58:51:43:f1:4a:f1:25:8f:a1:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Cisco WebEx LLC,O=Cisco WebEx LLC,L=San Jose,ST=California,C=US

Chains

Oct 7, 2026

CN=Cisco WebEx LLC,O=Cisco WebEx LLC,L=San Jose,ST=California,C=US

Minor OS version

Major OS version

Entry point

80730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

O:\webex-windows-plugin\output\maps\Release\webex.pdb

wininet

HttpQueryInfoA HttpOpenRequestA InternetCrackUrlA InternetSetOptionA InternetCloseHandle InternetReadFile InternetSetOptionW InternetConnectA HttpSendRequestA InternetOpenA

wintrust

WinVerifyTrust

version

GetFileVersionInfoSizeA VerQueryValueW GetFileVersionInfoA

uxtheme

SetWindowTheme

kernel32

LCMapStringW InitializeCriticalSectionEx GetLastError RaiseException DecodePointer DeleteCriticalSection lstrlenW MultiByteToWideChar WideCharToMultiByte EnterCriticalSection WriteFile LeaveCriticalSection InitializeCriticalSection WaitForSingleObject Sleep CreateFileA TerminateThread CloseHandle CreateThread lstrcpynW GetVersionExW GetSystemDefaultLangID LoadLibraryW GetProcAddress FreeLibrary ReadFile SetFilePointer GetFileSize GetCurrentThreadId GetTempPathA GetLocalTime GetCurrentProcessId FlushFileBuffers SetLastError FormatMessageW LocalFree UnmapViewOfFile CreateFileMappingA MapViewOfFile GetModuleFileNameA SetThreadUILanguage GetCommandLineA GetThreadUILanguage GetProcessHeap GetModuleHandleW GetSystemTimeAsFileTime GetTempFileNameA GetNativeSystemInfo CreateProcessA OpenEventW SetEvent GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc HeapSize GetFileType HeapAlloc HeapFree GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess QueryPerformanceFrequency LoadLibraryExW TlsFree GetCPInfo TlsSetValue TlsGetValue TlsAlloc EncodePointer RtlUnwind InitializeSListHead QueryPerformanceCounter GetStartupInfoW CreateEventW WaitForSingleObjectEx ResetEvent InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter OutputDebugStringW IsDebuggerPresent SetStdHandle GetCommandLineW GetEnvironmentStringsW GetStringTypeW FreeEnvironmentStringsW SetFilePointerEx GetConsoleCP GetConsoleMode CreateFileW GetUserDefaultLCID WriteConsoleW

user32

CreateDialogParamW GetWindowThreadProcessId SetPropA DestroyWindow SetWindowPos SetActiveWindow MessageBoxExW CreateWindowExW SendMessageW SetWindowTextW LoadStringW ShowWindow SetTimer DefDlgProcW RegisterClassW SetWindowTextA AttachThreadInput GetForegroundWindow SetFocus BringWindowToTop SetPropW LoadIconW LoadCursorW SetCursor SetWindowLongW GetDlgItem UpdateWindow SetForegroundWindow WaitForInputIdle FindWindowExA GetDesktopWindow GetMessageW DispatchMessageW TranslateMessage PostMessageW LoadStringA PostQuitMessage MessageBoxExA MonitorFromPoint GetDC GetMonitorInfoW ReleaseDC GetCursorPos GetWindowLongW KillTimer

gdi32

CreateFontIndirectW SetTextColor GetTextExtentPoint32W GetDeviceCaps DeleteObject SelectObject GetStockObject

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

SHGetFolderPathA

urlmon

ObtainUserAgentString

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

823667ed3c455913068fe3f669a45b6e067b0c6d3459d392af4e3f7190723349

PE Signature issue

wininet

wintrust

version

uxtheme

kernel32

user32

gdi32

advapi32

shell32

urlmon

comctl32

generic