8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e

Sharing

Copy URL Twitter E-mail

General

Target
8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e
Size 513KB
Sample261107-1a5pasfv6s
SHA256 8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e
MD5 c27e0e18c853247e81f3636391e9904f
SHA1 8abaf14dbd89abc34c05a2d1e6f1fed8abb75504
SHA512 7cd010831cfda4bf0b749ae7b5c7066043d47e063aef7dbb292081f51b906a9033938e2a832cd7c08094b851f98754bb0d0c112d63c2afd36ab70b469c8999d0
SSDEEP 12288:lTwYJfVKwQUzy6rRxE9iP8ErnKDb3FboAG2cCLXnbwXzhvX+:lTK6rT38ErKDb3/3bC
TLSH
T1C5B4CED1A58609F1D0007D7C097CBEF18276BDE3AFC0469AA3643A0A6E7E5527C07E79
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e

File Explorer

8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e

.exe 513KB

8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e

IMPHASH 3429562ffdcee916b899511079ccf6e6
SHA256 8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e
MD5 c27e0e18c853247e81f3636391e9904f
SHA1 8abaf14dbd89abc34c05a2d1e6f1fed8abb75504
SHA512 7cd010831cfda4bf0b749ae7b5c7066043d47e063aef7dbb292081f51b906a9033938e2a832cd7c08094b851f98754bb0d0c112d63c2afd36ab70b469c8999d0
SSDEEP 12288:lTwYJfVKwQUzy6rRxE9iP8ErnKDb3FboAG2cCLXnbwXzhvX+:lTK6rT38ErKDb3/3bC
TLSH
T1C5B4CED1A58609F1D0007D7C097CBEF18276BDE3AFC0469AA3643A0A6E7E5527C07E79
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\20245\Desktop\hex文件升级工具\WCHMcuIAP_WinAPP_自动安装驱动_DLL\Release\WCHMcuIAP_WinAPP.pdb

kernel32

CloseHandle GetLastError QueryPerformanceCounter QueryPerformanceFrequency FormatMessageA lstrlenA ReadFile LoadResource SizeofResource SetupComm GetCommState GetCommTimeouts PurgeComm SetCommState SetCommTimeouts FindResourceA IsBadReadPtr DeleteFileA WaitForSingleObject Sleep WriteFile GetModuleFileNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetOverlappedResult DeviceIoControl ResetEvent CreateEventA lstrcpyA SetThreadPriority LocalFree OutputDebugStringA SetFilePointer CreateThread CreateFileA LocalAlloc GetModuleHandleA ExitThread

user32

UnregisterClassA MessageBoxA CharUpperBuffA SendDlgItemMessageA PostMessageA GetDlgItem EnableWindow GetWindowTextA DefWindowProcA PostQuitMessage DestroyWindow ShowWindow DialogBoxParamA SetDlgItemTextA UnregisterDeviceNotification RegisterDeviceNotificationA RegisterClassA CreateWindowExA

advapi32

RegCloseKey RegOpenKeyExA RegEnumValueA

shell32

ShellExecuteExA

vcruntime140

__std_type_info_destroy_list _except_handler4_common __current_exception memset __current_exception_context strstr memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf __p__commode _set_fmode

api-ms-win-crt-heap-l1-1-0

free malloc _set_new_mode

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr

api-ms-win-crt-math-l1-1-0

_except1 __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _seh_filter_dll _controlfp_s terminate _register_thread_local_exe_atexit_callback _c_exit _cexit _set_app_type _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _initialize_narrow_environment _configure_narrow_argv _seh_filter_exe

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiDestroyDriverInfoList SetupDiGetDriverInfoDetailA SetupDiGetDeviceInterfaceDetailA SetupDiBuildDriverInfoList SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInfo SetupDiEnumDriverInfoA SetupDiDestroyDeviceInfoList

Sharing

General

Malware Config

Signatures

File Explorer

8cfde422f7067ad8a3760b107d84e3fa264cc9be9635e0cdd436d812bf1ca08e

kernel32

user32

advapi32

shell32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

setupapi

generic