bcdbdc5537d5e526534bde333cec9859[.]exe

General

Target
bcdbdc5537d5e526534bde333cec9859.exe
Size 395KB
Sample220120-hm3flagefj
SHA256 ebcd87682a64fc4d285a4ea0ff59ec860cfb6ba19c8d2e165b5fe69ca3adbbc5
MD5 bcdbdc5537d5e526534bde333cec9859
SHA1 e119ea982571e06ac9690254b103efcb999691e7
SHA512 e0002ea413f1afa1030abcdb8763a3130428167cceecbbb1981e17ecd126b93344bddf0b2a8f603c08a36ce5c924bca54be78949483f572108155555532c250a
SSDEEP 6144:bQRLpc2YP6u2pxdgtN5XEe8q9WKjgzoEQlTn:0u2YP5cWP6e/CoHN
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bcdbdc5537d5e526534bde333cec9859.exe

.exe 395KB

bcdbdc5537d5e526534bde333cec9859.exe

IMPHASH 140966036910a5f510e2a5a7cba50e06
SHA256 ebcd87682a64fc4d285a4ea0ff59ec860cfb6ba19c8d2e165b5fe69ca3adbbc5
MD5 bcdbdc5537d5e526534bde333cec9859
SHA1 e119ea982571e06ac9690254b103efcb999691e7
SHA512 e0002ea413f1afa1030abcdb8763a3130428167cceecbbb1981e17ecd126b93344bddf0b2a8f603c08a36ce5c924bca54be78949483f572108155555532c250a
SSDEEP 6144:bQRLpc2YP6u2pxdgtN5XEe8q9WKjgzoEQlTn:0u2YP5cWP6e/CoHN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10191

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA InterlockedDecrement SetMailslotInfo GetComputerNameW GetTimeFormatA SetEvent SleepEx GetModuleHandleW GetCurrentThread GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleW CreateRemoteThread FindActCtxSectionStringA ReadConsoleInputA GetStringTypeExW GetFileAttributesW SetLocaleInfoA LCMapStringA GetLongPathNameW GetProcAddress VirtualAlloc SetStdHandle GetAtomNameA UnhandledExceptionFilter LocalAlloc DnsHostnameToComputerNameA GetModuleFileNameA GetModuleHandleA GetConsoleTitleW WriteProfileStringW GetFileTime GetProfileSectionW lstrcpyW GetOverlappedResult SetUnhandledExceptionFilter GetLastError HeapReAlloc HeapAlloc GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent RtlUnwind Sleep ExitProcess WriteFile SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId HeapCreate VirtualFree HeapFree CloseHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CreateFileA ReadFile GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEndOfFile GetProcessHeap LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RaiseException

advapi32

ReportEventA

winhttp

WinHttpSetDefaultProxyConfiguration

Sharing