be0fa98d2bec074cc3b5cc7b1e5d4bc6[.]exe

General

Target
be0fa98d2bec074cc3b5cc7b1e5d4bc6.exe
Size 403KB
Sample220726-jcc9dsafg3
SHA256 601ddb608c894200875c864df531c61ebedbf9351ae21e17bd735dfd4abf4d5b
MD5 be0fa98d2bec074cc3b5cc7b1e5d4bc6
SHA1 1904baf289c462d8d361d9b1a4305046c9f6024a
SHA512 744e701c1d163ce31d1ffbadcb308e2a93e0b06ff222c8d3da62cbc5c0ca48d8e51226001cb3279a15b597711c276c83469584719249cb21c89bd9eecd50f393
SSDEEP 6144:7SsCFsYZB6hxST55YfdxrteI1EJvtjJnLj4VmJpUyYkr0QsZB612/kF3Ch0mNf:7indKteI1EJvt5Lj4VmJuaOp63
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

be0fa98d2bec074cc3b5cc7b1e5d4bc6.exe

.exe 403KB

be0fa98d2bec074cc3b5cc7b1e5d4bc6.exe

IMPHASH e6c3aa777d2861625d0bcdf9e9a3689d
SHA256 601ddb608c894200875c864df531c61ebedbf9351ae21e17bd735dfd4abf4d5b
MD5 be0fa98d2bec074cc3b5cc7b1e5d4bc6
SHA1 1904baf289c462d8d361d9b1a4305046c9f6024a
SHA512 744e701c1d163ce31d1ffbadcb308e2a93e0b06ff222c8d3da62cbc5c0ca48d8e51226001cb3279a15b597711c276c83469584719249cb21c89bd9eecd50f393
SSDEEP 6144:7SsCFsYZB6hxST55YfdxrteI1EJvtjJnLj4VmJpUyYkr0QsZB612/kF3Ch0mNf:7indKteI1EJvt5Lj4VmJuaOp63
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

41696

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNamedPipeHandleStateW LocalFree WriteConsoleInputA EnumDateFormatsW CopyFileExW DnsHostnameToComputerNameW VerifyVersionInfoA FindNextFileW VirtualUnlock LockFile GetProfileSectionW RequestWakeupLatency SetProcessPriorityBoost GlobalGetAtomNameW DeleteFileA FindNextVolumeMountPointA TlsSetValue LoadResource WriteConsoleInputW GetConsoleTitleA GetComputerNameExW OpenEventW CallNamedPipeW GetModuleHandleA GetSystemDirectoryA GetDriveTypeA BuildCommDCBAndTimeoutsW GetProcAddress GetShortPathNameA ZombifyActCtx GetCommandLineW InterlockedIncrement GetConsoleTitleW CopyFileW CreateActCtxW FormatMessageA EnterCriticalSection FindNextVolumeA CreateIoCompletionPort LoadLibraryA CreateNamedPipeA GetSystemDefaultLCID GetConsoleAliasesLengthW WriteProfileSectionA AddAtomW InterlockedDecrement HeapFree _hread InterlockedExchangeAdd GetStartupInfoW CreateMailslotA GetCPInfoExA GetSystemWow64DirectoryW GetLastError GetPrivateProfileIntA GetConsoleAliasExesLengthW WaitForDebugEvent EndUpdateResourceA SetLastError LoadLibraryW ExitThread GetACP lstrcatW GetConsoleAliasA GetDiskFreeSpaceExA DefineDosDeviceA TerminateProcess EnumResourceLanguagesW GetCPInfoExW SetConsoleTextAttribute CreateJobSet WriteConsoleW SetCriticalSectionSpinCount GetComputerNameW EnumSystemLocalesA WritePrivateProfileSectionA WritePrivateProfileStructA GetPrivateProfileSectionNamesW FileTimeToSystemTime SetTapeParameters lstrcmpW SetEvent FreeLibrary FindResourceW SetCommState FormatMessageW InterlockedCompareExchange CreateFiber EnumDateFormatsA GetConsoleFontSize MoveFileA LocalAlloc SetFileShortNameW lstrcpyA HeapUnlock SetCalendarInfoW SetComputerNameW GetConsoleAliasesW EnumDateFormatsExA GetConsoleOutputCP LocalSize GetStdHandle GetLocalTime GetStringTypeA FindActCtxSectionStringA FreeEnvironmentStringsA GetModuleHandleExW GetBinaryTypeA GetFileAttributesA GetSystemWindowsDirectoryW LocalFlags GetSystemTimeAdjustment SetProcessShutdownParameters lstrcpynA GlobalWire FillConsoleOutputCharacterA GetCompressedFileSizeA GetFullPathNameA ReadConsoleW FreeUserPhysicalPages WriteConsoleOutputCharacterA OpenJobObjectW CreateFileW DeleteTimerQueueTimer SetCurrentDirectoryW GetNamedPipeHandleStateA CreateFileA WideCharToMultiByte RaiseException HeapValidate IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetFilePointer QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA OutputDebugStringW MultiByteToWideChar GetStringTypeW GetLocaleInfoA LCMapStringA LCMapStringW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleA CloseHandle

user32

LoadMenuW CharUpperW GetMenuInfo

msimg32

AlphaBlend

Name

.text

Size

168KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

171KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zowu

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wisu

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jejiy

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

be0fa98d2bec074cc3b5cc7b1e5d4bc6.exe

kernel32

user32

msimg32