bcdc1a6d703d1b04b45f235f3c82c751[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
bcdc1a6d703d1b04b45f235f3c82c751.exe
Size 585KB
Sample221111-d22qdsagbk
SHA256 c842bf6f4efd1513753eb96a4715db648ac23dcdbf38c351f410d3bcbaad5967
MD5 bcdc1a6d703d1b04b45f235f3c82c751
SHA1 d9b77ea6ca968f9caa602660668eae157af1dfa8
SHA512 94688ed06c34484eacefe0765ae438b0790eed70e752f254d60b6fb51b7dc6451f52f576f061d31e93add12c988fd923ede2a37a79c12429be852b2fb8020aed
SSDEEP 12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxU:ZAT1BWEtBVUNiMS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bcdc1a6d703d1b04b45f235f3c82c751.exe

.dll 585KB

bcdc1a6d703d1b04b45f235f3c82c751.exe

IMPHASH bf309f28e2e75a572eb2f2244be62b26
SHA256 c842bf6f4efd1513753eb96a4715db648ac23dcdbf38c351f410d3bcbaad5967
MD5 bcdc1a6d703d1b04b45f235f3c82c751
SHA1 d9b77ea6ca968f9caa602660668eae157af1dfa8
SHA512 94688ed06c34484eacefe0765ae438b0790eed70e752f254d60b6fb51b7dc6451f52f576f061d31e93add12c988fd923ede2a37a79c12429be852b2fb8020aed
SSDEEP 12288:vocAHzfdBuh0PBGEhq6FJxJ/3UEoiMxU:ZAT1BWEtBVUNiMS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

15144

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

MessageBoxA InvalidateRect GetMessageW DefWindowProcW DestroyWindow CreateWindowExW RegisterClassExW LoadStringW ShowWindow DispatchMessageW SetGestureConfig GetGestureInfo TranslateAcceleratorW TranslateMessage LoadCursorW PostQuitMessage UpdateWindow BeginPaint EndPaint CloseGestureInfoHandle ScreenToClient

gdi32

Polyline LineTo CreatePen MoveToEx DeleteObject SelectObject

ole32

CoLoadLibrary

crypt32

CryptStringToBinaryA

kernel32

GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc GetFileSizeEx WriteConsoleW SetConsoleCtrlHandler GetFileType GetStdHandle GetProcessHeap EnumSystemLocalesW SetFilePointerEx ReadFile ReadConsoleW OutputDebugStringW CreateFileW HeapSize CloseHandle GetUserDefaultLCID IsValidLocale GetStringTypeW DeleteCriticalSection RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCurrentThread HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW

ACKZMHIObnaQHKwlzPq AOVudbyKxJVZeQMXsOLO AYyJBXGifeSEtCQk AhOoclQccPuG BkVECfpqiLatpcAjjeEXOZfyXY Bnyskkwd BwmAydmTqsNeDELdYUdLwTih CYNaQxtMawBMSIzdZWbTGpErba ConsmUhFFyb CzQwMEDCqCtUXGrJoKOLql DJCyeSXwKMnRyfbsSLCKxPpa DWugusOEsHPtXKgDd DfOfLuSCMIvgQaJYk DfkbPshiZaYhOSaqjIqPzONzY DllRegisterServer DnmCJIXEMkYokzeRRfG EKbIjoXzthxYq EWsrDBYLifLIKCx EYRKsLUkgMAWuxrfaIJmSgUBLc EfTrrBRRqguoDIjHNVAsJ EfiQnj FHJZnjTrtY FNDTVN FPWBMLNUrKgqAM FSOTatWmqbOxAfLsjwDimOJuI FVrtzByTqOLDyxlp FWyuZZnJq FbRCkW FtrghRYdy FunHXBytaEElTSmUSQaxzW FyjmimNSHaN GFvfuuOTsiXRZem GQuEvZTMELOxgCfrdhLu GTAOBqoXXNUuwQk GXBXUVZCqiUSlXidXO GpVGqWWnqIQjvlapeLvmZfi HKiZorFwnyyKVvRyl HQChNQSgCDQFBj HSHotINBWmzydlPTEIfsXGwf HVltrVWSPTyRN HbmDTfXglURaCPuXXtLWU HmUBBZu HnPoMgPYcGNsOhwCJGXNIe IDcRKhVmGJDZIQUlXXSXviO IFKCtEkfbx IHwQGYmyDi IJrjGqhERio IJtycxPsTSa IZsbRuJSZRMQltptMtlTIjq IemmPHlIUKfWUEFjL IoBQwhYmCRZqMXpUaubCn JJUbACbSOWX JJsDDeNgoEWNWyBpXLgKa JTTXkkGF JlCiEpVZnS JnmiFnk JprrRmuaDn KEekdWh KHEZQjbrCpYNETUhvaqOH KRPfoFibPSzSrtMziDiZJMjpEk KZqNGoq LQjcpeEdSdviWRBnc LXjroPDxbnZvuHAaofawR LcvIvMcywgnRCiIHovfshoSI LeBqVZwmAMKFKJEYOao LhjWUlVqYLdqrpdT LpnuGzVsvTJPoNZtEU MKiBXwXJxM MMbpxrmFfmd MNJtcYtYTpkhtNJwmsGayBExl MbSqjor MlUEOKTwxQO MmNhNY MtZNktTtZeSsetQdMIobnqgJN NDzloBRTiOCzFqnDESlYiGJz NHdMlFCbsRIZHAlXLut NylPFThbliBOEyrujKtyjpW OGGltngRdRjeETLJuyE OMhWNPrtGvXrDc OXTIbdKaaFNFhpZoL OmcpNNkGQNlfySxzyKHLT PBXSLAddeyA PDTTTYnwZWtmvgsDhQsjZU PRnncKInMtiadcjSSOQMFBQ PTqVRIJDpUraWiQ PrQvtewtRmO QGzPJQYQmszmRrRK QSZlVaTGjIxGWOeZfGN RDswoygaJbJWfRato RStXZYXYudckPDHz RgqjGZSoUeEcIqnMvAU SFcQiGXaye SJVNBxANqxZOkCrdHcqd SKGYjRmKvjRyc SOrXsIFXOx SpMHiyCka SwRuhANDGtYeZvIvL TEXYMBzoUnbpqCNMtncyH TNIcGjIUdTpSRDDkLMLiSmMzjL TPWLClLTaJmbJ TvNJOHLJssnMTyGMYYfTRZkQfY TviEPpUFMOuUAzSe UNNICJvBjyUFXwAOWRR UPNJpwqsqZmrRvPv VSCiqDUzUFFEzRcrCcWUIyxW VZZOFVhvSPFWJPbDSgML VrvAiARvhpsioDTvCsDpBWulVj VwTwbiJHhVyxhwrqGO WQOHTkDrFPqAa WRbhXlsUMohyHwwIcen WbAqAdgWVyvU WbVnejTmAenfcQVIpnq WfvnosCpZU WniHGai WoHUOvKkHgGCLHAfQWqMp WrenSYFI WxbfuHhPfdKZdIwvT XCQdNrvyrBIWZmxBXQ XGweHugOKIsErBIXlQtoAf XPdTfv XeJMUhn XgIYUiiYvZqAYkCpBzIRepfusc XxxGZdkAjnOvfCGXaUp YBwmARMK YFIukFX YIEzPijPuSEUDublpbKSuo YMDJlOFuodaYAQLeGQkc YWtaIGvg YfUzklBKELBicHcyYN YjskFIhoFvtxplXgXtnfIf YnhRnVOJVBWcCRg ZHJCTtneVBcLxFiFnGg aIjZFMDS aMTTokAjPrlPNl aQixWbkkl aauGXTnoHerQPEAdpmbxW aqXPJQsGuQNY bKpSPr bkIIqsWVbyUjvq bpwKexxmwQXToabxrI buYYvJRiQBDrx bwKTgNcwzNCMMazxQnksgPoMYH cIWTVLVTkeeCrLMzOeeRZrGJSv cIggJm ceCdpaLIInGREyzrMnutvv ceMUenqSerxOIsyip cyFldXcQbpghTEMTx dOcHvEogkqlHGvXiyXDlb dcBcGkFtILZfVKGjwlp dieMqBUxL dseZAioHVrcmpyJiL eQeKgkbvLQvnFKFOHCrntYX eSncnJDMjHJgWfLETuvOrPwuX eVWxywjPCGLxjCmBqwiSHDmQ eZJKYQozWFVwxNEiBgKs eZpNtEcqYmYlHr einEDhZnOdZQrqsLeDT ekpgkrLywwy eksViUURftndlwRdwIOqJPqDbM frcgaAFkyvENrvcg fyBPxsvBwdDxNn gcoxAPyjuxZE giCfzkFJgbNQVgrGIg hkTCpTyWVfVskuIaLTwIdI hkhQezBRO hlJDgJZgKgSWhsjKu hwtxKkvclLfqYPlzuN hwxxBxRyxQvU hytdxlppfBzgJ iGYEbafnUGwaqzLwiEkDcEoFXc iGYlltWJoEZkQUuBZjn iPQPztCACXTCftDZTvNvjn idIPfAiQBpOOJt iqDXnYKHYuvKDk isQnIHOKAYStRuHNa jRGQIAgrasRFSKFjASMTRGjUAQ jbtWQsliCJlKJi jxFwRFjTxqZBeWyYyGUjJht kJiLoUyRaJSlGAQwQY kXCRbDFCWsWkgDZ knVlSRpuMXigHbteRSdN lFuQHVlMqkcpyquJwPy lShqxKkjpAzGfSkJhI lUawyisBWFPUEeYWPOsrwiE laANAlWCv lkGHxNVNbj lsAeLBJdMVmYYItQoJSvCRYH lygWnYwnRJeU mIfOwaNjapchucclSR mYMzZFRyhlLMj mqDuazu nGtnIzcC nWOEkAFtcfB nucLASLksxzsTOm nvMQpNuTqWTeGVaTRoGxbvqP oRLRCOOs obtutjxbDeJGmWXwrNJO ogHMlfmoMSWiLsw ogYQVDGHrtTXPfRS ojDemZqmxKRkSOPmqat pKXkqiQt pZosDkvKboDlpSeaEkq qWEuWVdjXRrRKsKgJReOLq qWXEkPM qkRSaAJ rEPTSIjZh rSJyHvLUOTZicMruxCvEGoHc raNMBQY risZAsSaIagieXrdZnOhDzYIOB ruuEEEOFWCU sHmlVkEuiFuMGKlJpwXdZx sVJjsSsGPX sfUPtIbRemdA sqcseOa tILyVSAhgCdrEHfPBfVtFyoi tPjnuDplapdPIcrqZRmFXK tXfRwwpgGyZPDKAjlNIXEtOWG tkSvHbCTSiszhkEsUzPu tnLzaHFO tpEZEjlvmSwPCfGBwV tuYBrkIdkvGeYBclqo uYRaNlNJkGdzz ulHKyMUqbCPZAAnMrkdggm urRIlPSgdtAFARiFapAop urbspxQGSLCjnzsgbM utGMzHLpjYPEvUwmqbMaXd vRJFekacz vZXxIAQsf vhilLLLSQAgorQlDYcrg vjySCWm vxGqOYVxeIQzHyntqWqhQk vyEVtiIRlJmXCZssjhwmvCSgCi wQVxSUwsFAtnvfvsRKP xDofRk xFSCNuFr xNdkmblWjdxgkFdiybZ xaKbvIFmKuHEoQWRK xlqihUCH xuhPWlfWSOvzDpLXCOqs yBaBzgnZJat yNjzoWhmYhDVouThktWX yVPAgpehBiCzOhTsXpBCKvKh yZEOJgzErmiOalDcqbqqDtPb ycObxXXeiPKAAyH yeWcDVvwyxEtlDMveHTXhTdOct ynHEUiKCFMINWfolddVsmMgYDs zCGWJxJejbcdgDMKVsDv zNEbsppOqODrSjTVrDiLrOtygu zNJRmDXDLDbdIKXouATLf zloZBAmto zvTLkjiEXqTKQtLGxHslDrtLr