Service[.]bmppczcevsm

General

Target
Service.bmppczcevsm
Size 385KB
Sample220525-2bls9aabbn
SHA256 611479c78035c912dd69e3cfdadbf74649bb1fce6241b7573cfb0c7a2fc2fb2f
MD5 45abb1bedf83daf1f2ebbac86e2fa151
SHA1 7d9ccba675478ab65707a28fd277a189450fc477
SHA512 6bf1f7e0800a90666206206c026eadfc7f3d71764d088e2da9ca60bf5a63de92bd90515342e936d02060e1d5f7c92ddec8b0bcc85adfd8a8f4df29bd6f12c25c
SSDEEP 12288:3ZFjgB8S7dgKfFTJnUxzJQK2LM0r04JduPK1LOE/BE:33jgCS7BFnUbR60wLLOSi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

Service.bmppczcevsm

.exe 385KB

Service.bmppczcevsm

IMPHASH 9734ba8626408cec04bb8fa7d8bb6e83
SHA256 611479c78035c912dd69e3cfdadbf74649bb1fce6241b7573cfb0c7a2fc2fb2f
MD5 45abb1bedf83daf1f2ebbac86e2fa151
SHA1 7d9ccba675478ab65707a28fd277a189450fc477
SHA512 6bf1f7e0800a90666206206c026eadfc7f3d71764d088e2da9ca60bf5a63de92bd90515342e936d02060e1d5f7c92ddec8b0bcc85adfd8a8f4df29bd6f12c25c
SSDEEP 12288:3ZFjgB8S7dgKfFTJnUxzJQK2LM0r04JduPK1LOE/BE:33jgCS7BFnUbR60wLLOSi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

236117

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA IsWow64Process lstrcatA GetModuleHandleA lstrcpyA WinExec lstrlenA HeapAlloc GetProcAddress lstrcpynA GetProcessHeap WriteConsoleW LocalFree GetWindowsDirectoryA CloseHandle DeleteFileA LoadLibraryA GetFileAttributesA GetLastError CopyFileA Sleep LocalAlloc GetVolumeInformationA GetCurrentProcess HeapFree GetModuleFileNameA SetEndOfFile HeapReAlloc HeapSize ReadConsoleW ReadFile FlushFileBuffers CreateFileW GetStringTypeW SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile MultiByteToWideChar LCMapStringW MoveFileExW GetFileType GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

advapi32

CreateServiceA RegCloseKey StartServiceCtrlDispatcherA GetCurrentHwProfileA CloseServiceHandle RegQueryValueExA SetServiceStatus RegisterServiceCtrlHandlerA OpenSCManagerA GetUserNameA StartServiceA RegOpenKeyExA OpenServiceA

shell32

SHGetSpecialFolderPathA SHGetFolderPathA ShellExecuteA

setupapi

SetupDiGetClassDevsA SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInfo

Sharing