bc9d356f8d08396d620d249b8f34a664c9397467b1a6033013c788df734f8bda

Sharing

Copy URL Twitter E-mail

General

Target
bc9d356f8d08396d620d249b8f34a664c9397467b1a6033013c788df734f8bda
Size 501KB
Sample220520-gl4ftschc4
SHA256 bc9d356f8d08396d620d249b8f34a664c9397467b1a6033013c788df734f8bda
MD5 15da97ee7d404ff8d7c3b2b0cb8329ca
SHA1 2e3a61cda59a5b9ef8b22932eb369d1d7836ef70
SHA512 22cd806a68a6ebd135cbc3a0617e21b79747c9f3a3c8cf174c14c74e2cccf0f4bfa4f0ef414d3814c9f4b29e44b2875cee5b2f842ee77a6b72d641501095bd0c
SSDEEP 6144:ZCLXqz8daTi1swruoyOWhS3Mo2LnlOpUWz+t50hw1+bkIKgdhozadwKQSxFyynV3:oezQau1RP3MWa51UKgdDwKPrFV3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bc9d356f8d08396d620d249b8f34a664c9397467b1a6033013c788df734f8bda

.exe 501KB

bc9d356f8d08396d620d249b8f34a664c9397467b1a6033013c788df734f8bda

IMPHASH a095ddefad0c120373e837e542693d8f
SHA256 bc9d356f8d08396d620d249b8f34a664c9397467b1a6033013c788df734f8bda
MD5 15da97ee7d404ff8d7c3b2b0cb8329ca
SHA1 2e3a61cda59a5b9ef8b22932eb369d1d7836ef70
SHA512 22cd806a68a6ebd135cbc3a0617e21b79747c9f3a3c8cf174c14c74e2cccf0f4bfa4f0ef414d3814c9f4b29e44b2875cee5b2f842ee77a6b72d641501095bd0c
SSDEEP 6144:ZCLXqz8daTi1swruoyOWhS3Mo2LnlOpUWz+t50hw1+bkIKgdhozadwKQSxFyynV3:oezQau1RP3MWa51UKgdDwKPrFV3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

19879

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetPriorityClass TryEnterCriticalSection lstrlenA CopyFileExW WriteConsoleOutputW UpdateResourceA LoadLibraryExW GetCommState InterlockedDecrement ZombifyActCtx GetEnvironmentStringsW CancelWaitableTimer SetEvent GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent GetProcessHeap GetConsoleAliasesA GetSystemTimeAsFileTime GetConsoleTitleA WaitNamedPipeW CreateActCtxW GlobalAlloc HeapCompact GetCalendarInfoW FreeConsole GetStringTypeExW ReadFile GetTimeZoneInformation lstrlenW VirtualUnlock VerifyVersionInfoW GetProcAddress AttachConsole HeapUnlock ProcessIdToSessionId SetConsoleCtrlHandler HeapLock SetConsoleWindowInfo GetModuleFileNameA RequestDeviceWakeup VirtualProtect GetCPInfoExA FindAtomW QueryDepthSList GetVolumeInformationW lstrcpyA SetDefaultCommConfigA CreateMutexW LoadLibraryW HeapReAlloc GetStartupInfoW HeapAlloc SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError GetCurrentThread HeapCreate HeapDestroy VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection FatalAppExitA EnterCriticalSection VirtualAlloc FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoW GetLocaleInfoA WideCharToMultiByte GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW CompareStringA CompareStringW SetEnvironmentVariableA

gdi32

GetCharWidthFloatA

advapi32

GetSidSubAuthorityCount

Name

.text

Size

430KB

Virtual Size

429KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

46.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vovibij

Size

1024B

Virtual Size

963B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yumigo

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.riso

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.remohug

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ