bfa665872b30eba3a8fefa20ca9017ba[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
bfa665872b30eba3a8fefa20ca9017ba.exe
Size 449KB
Sample221223-e6khcafh42
SHA256 233fdd1cc31413c2f799545101decddc609ea38be3299b4bb6ac57450c774ff0
MD5 bfa665872b30eba3a8fefa20ca9017ba
SHA1 cb812e8e9e351f57b8499e602d972c05372255af
SHA512 6268565c7b667e157ef52c0c847b473c22834e784a9cfeab72d482f8624d86295c128e666955cb137ba2877355e9a549157fb5410be91a5e0abafc3404d56c98
SSDEEP 12288:XywzA+ch6wtB3kv8MHe2akRR0TCtyYduHNI:bkXhl3e/+2akRR0TCAYdE
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bfa665872b30eba3a8fefa20ca9017ba.exe

.exe 449KB

bfa665872b30eba3a8fefa20ca9017ba.exe

IMPHASH 83591f62aa1432af9c580674ba7082e0
SHA256 233fdd1cc31413c2f799545101decddc609ea38be3299b4bb6ac57450c774ff0
MD5 bfa665872b30eba3a8fefa20ca9017ba
SHA1 cb812e8e9e351f57b8499e602d972c05372255af
SHA512 6268565c7b667e157ef52c0c847b473c22834e784a9cfeab72d482f8624d86295c128e666955cb137ba2877355e9a549157fb5410be91a5e0abafc3404d56c98
SSDEEP 12288:XywzA+ch6wtB3kv8MHe2akRR0TCtyYduHNI:bkXhl3e/+2akRR0TCAYdE
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14733

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLCID GetModuleHandleW TlsSetValue LoadLibraryW DeleteVolumeMountPointW EnumSystemCodePagesA SetConsoleMode WriteConsoleW MultiByteToWideChar GlobalUnfix GetLastError SetLastError GetProcAddress VirtualAlloc VirtualAllocEx AddConsoleAliasW LoadLibraryA WriteConsoleA CreateHardLinkW SetProcessWorkingSetSize FoldStringA QueryMemoryResourceNotification CreateMutexA SetThreadAffinityMask EndUpdateResourceA GetConsoleProcessList LCMapStringW GetConsoleAliasExesA GetConsoleAliasA GetComputerNameA GetStartupInfoW HeapAlloc TlsGetValue TlsAlloc TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA

user32

WindowFromDC

gdi32

GetTextExtentExPointW

advapi32

RegQueryInfoKeyA

ole32

CoRevokeMallocSpy