bf917e9c2f954ccd846bc62bfb616a4b

General

Target
bf917e9c2f954ccd846bc62bfb616a4b
Size 265KB
Sample220609-arrkwschh6
SHA256 4a996631026f70f0fc46e06f0c190d89fc91c71e4fa6a3deca9aeab4d5232df4
MD5 bf917e9c2f954ccd846bc62bfb616a4b
SHA1 262c3ad338250227bb1da690e74759bbcca2291c
SHA512 e4a2dea9f7afd3bee85a1d4a91af87ab829a2fe87c7ff2cebed82edb4b75c78865f895fe7268347145566eb80c3a076563b92a896ea838549c7d7fc2c07490f8
SSDEEP 3072:En7ECEiyFUpqxx8zqXp6RU4IgP/CZ76UwejmlTMjMCc3++d7MKVmFHymQ5EXJd0n:Yh0x8zq5vWyNw+aTMjq3+6fmFfxsee
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bf917e9c2f954ccd846bc62bfb616a4b

.exe 265KB

bf917e9c2f954ccd846bc62bfb616a4b

IMPHASH d530938e11b87f5dcaab85f14604822a
SHA256 4a996631026f70f0fc46e06f0c190d89fc91c71e4fa6a3deca9aeab4d5232df4
MD5 bf917e9c2f954ccd846bc62bfb616a4b
SHA1 262c3ad338250227bb1da690e74759bbcca2291c
SHA512 e4a2dea9f7afd3bee85a1d4a91af87ab829a2fe87c7ff2cebed82edb4b75c78865f895fe7268347145566eb80c3a076563b92a896ea838549c7d7fc2c07490f8
SSDEEP 3072:En7ECEiyFUpqxx8zqXp6RU4IgP/CZ76UwejmlTMjMCc3++d7MKVmFHymQ5EXJd0n:Yh0x8zq5vWyNw+aTMjq3+6fmFfxsee
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

59296

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationW GetNamedPipeHandleStateW CreateIoCompletionPort FillConsoleOutputCharacterA DisableThreadLibraryCalls TerminateProcess GetCurrentProcessId GetVersionExA EnumDateFormatsA FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsA VirtualUnlock WriteProfileStringA VerifyVersionInfoA SetProcessPriorityBoost GetDriveTypeW GetPriorityClass GetCompressedFileSizeA FindNextVolumeMountPointW OutputDebugStringA GetWriteWatch WriteConsoleInputA WriteConsoleInputW GetConsoleTitleA SetComputerNameExA GetTimeZoneInformation LoadLibraryW GetSystemDirectoryA GetDriveTypeA LoadLibraryA LocalAlloc GetShortPathNameA ActivateActCtx GetProfileSectionA DeleteFileW GetCommandLineA InterlockedExchangeAdd ReleaseActCtx FindResourceW FormatMessageA GetModuleFileNameW CreateJobObjectW InitializeCriticalSection SetFirmwareEnvironmentVariableA GetDllDirectoryW GetExitCodeThread GetNamedPipeHandleStateA WritePrivateProfileStringW GetConsoleAliasesLengthW WriteProfileSectionA AddAtomA UpdateResourceW InterlockedDecrement HeapSize _hwrite InterlockedExchange GetStartupInfoW DisconnectNamedPipe GetCPInfoExA GetSystemWow64DirectoryW SetLastError GetConsoleAliasExesA DebugBreak EndUpdateResourceA GetLastError GetStringTypeExW GetConsoleAliasesLengthA DeleteVolumeMountPointW FatalAppExitA SetSystemTime OpenFileMappingW lstrcmpA SetConsoleCursorPosition SetDefaultCommConfigA VirtualAlloc GetOEMCP CreateActCtxW GetMailslotInfo GetConsoleAliasW _lwrite GetDiskFreeSpaceExA DefineDosDeviceW FlushConsoleInputBuffer EnumResourceTypesA lstrlenW GetProcessAffinityMask AddVectoredExceptionHandler WriteConsoleA VirtualProtect ReadConsoleOutputW SuspendThread BuildCommDCBA WritePrivateProfileStringA GetHandleInformation GetComputerNameA WritePrivateProfileSectionW TryEnterCriticalSection GetPrivateProfileSectionNamesW CopyFileW GetVolumePathNameW GetConsoleMode HeapWalk FindNextFileA ResetEvent ReadProcessMemory GetProcAddress ChangeTimerQueueTimer VerifyVersionInfoW InterlockedCompareExchange MoveFileA GetOverlappedResult SetCommMask SetFileShortNameA GetFileAttributesA FreeEnvironmentStringsA EnumDateFormatsExW GetSystemWindowsDirectoryA GetProfileStringW GlobalGetAtomNameA GetConsoleAliasesA CreateMailslotW EnumDateFormatsW GetConsoleOutputCP MoveFileWithProgressA GetFileInformationByHandle SetLocalTime FoldStringA CallNamedPipeA GetConsoleAliasExesLengthW CopyFileExW OpenSemaphoreA GetModuleHandleExW WriteConsoleOutputCharacterA SetComputerNameW FindActCtxSectionStringW GetTickCount GetUserDefaultLCID LocalUnlock FindFirstVolumeW GetFileTime lstrcatW OpenWaitableTimerA EnumResourceNamesW OpenFileMappingA GetFileType UnregisterWait RaiseException GetFileAttributesW lstrcpynW FillConsoleOutputCharacterW GetFullPathNameA GetThreadPriority ReadConsoleA CreateFileW GetDateFormatW DeactivateActCtx SetCurrentDirectoryW GetBinaryTypeW InterlockedIncrement Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetModuleHandleW ExitProcess DeleteFileA HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile WriteConsoleW OutputDebugStringW GetModuleFileNameA GetACP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount SetHandleCount GetStartupInfoA QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers WideCharToMultiByte GetConsoleCP HeapAlloc HeapReAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer SetStdHandle ReadFile CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

bf917e9c2f954ccd846bc62bfb616a4b

kernel32