bc239c97e7f12aebe5b2eac70cf54092236362693551d6970c2d9b38848f0470

Sharing

Copy URL Twitter E-mail

General

Target
bc239c97e7f12aebe5b2eac70cf54092236362693551d6970c2d9b38848f0470
Size 1.5MB
Sample221104-n3emcsehb8
SHA256 bc239c97e7f12aebe5b2eac70cf54092236362693551d6970c2d9b38848f0470
MD5 5faa7bde5cf990d4306e4c00a475873b
SHA1 4ceea86cd8e435822753b872b072aa634a1b9f2f
SHA512 5209b04d7e678d3ba8aae54131acab5c03fe616bf8467ac8f75e7605de2b690896ac7902d00ecc39da354bfb2043c612202390811b5886bc220176ebc6fc34ae
SSDEEP 24576:rc1oRFeG+S3y6SyuhMY51E3P4ftt82cJWvWlNc9TrN1/9oFNtFHarh2kmLtCBWb9:DFeG+S3WMO23P4fx8WvcwThKXoIkmLtX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bc239c97e7f12aebe5b2eac70cf54092236362693551d6970c2d9b38848f0470

.exe 1.5MB

bc239c97e7f12aebe5b2eac70cf54092236362693551d6970c2d9b38848f0470

IMPHASH 78dee4e11b3000b6380c410474a798f4
SHA256 bc239c97e7f12aebe5b2eac70cf54092236362693551d6970c2d9b38848f0470
MD5 5faa7bde5cf990d4306e4c00a475873b
SHA1 4ceea86cd8e435822753b872b072aa634a1b9f2f
SHA512 5209b04d7e678d3ba8aae54131acab5c03fe616bf8467ac8f75e7605de2b690896ac7902d00ecc39da354bfb2043c612202390811b5886bc220176ebc6fc34ae
SSDEEP 24576:rc1oRFeG+S3y6SyuhMY51E3P4ftt82cJWvWlNc9TrN1/9oFNtFHarh2kmLtCBWb9:DFeG+S3WMO23P4fx8WvcwThKXoIkmLtX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27250

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread GetCurrentThreadId GetModuleHandleA GetProcAddress MultiByteToWideChar FreeConsole CreateFileW HeapSize GetProcessHeap WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW

user32

GetWindowLongA

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.kbjhxq

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bfghwq

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

~�=

Size

243KB

Virtual Size

243KB

Characteristics

IMAGE_SCN_MEM_READ

Name

n�

Size

228KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_MEM_READ

Name

��&5I\

Size

230KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_MEM_READ

Name

�*��

Size

237KB

Virtual Size

237KB

Characteristics

IMAGE_SCN_MEM_READ

Name

Size

217KB

Virtual Size

217KB

Characteristics

IMAGE_SCN_MEM_READ