bc86e8b152ed97cb72c0311e48d51aead3a0e710018aa9a2a8c4ec1b630655c4

General

Target
bc86e8b152ed97cb72c0311e48d51aead3a0e710018aa9a2a8c4ec1b630655c4
Size 370KB
Sample230129-zyemcaed2v
SHA256 bc86e8b152ed97cb72c0311e48d51aead3a0e710018aa9a2a8c4ec1b630655c4
MD5 46507a45aa79677197727047c63cc997
SHA1 f42c53191d094302575314257d729748d2b8adc8
SHA512 46ba40ccbc300919dd1bdf8923c21237ab8a9a26e075dac67c5c19d5ee05d1f59cfc5909b93bac95daacc5d9b1c2a089aa08649e0d3e3e55416efb221992e774
SSDEEP 3072:YGa8GTsKzYFXWRpbbQlV082OvAsuKW285MCpyDuN/sNvvMzeLq+c1WPE68EnqV1:YVLkEbQV/2kAnKUfd8v0KLk368n1
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bc86e8b152ed97cb72c0311e48d51aead3a0e710018aa9a2a8c4ec1b630655c4

.exe 370KB

bc86e8b152ed97cb72c0311e48d51aead3a0e710018aa9a2a8c4ec1b630655c4

IMPHASH 99a5f8ce5e70e176db5de1c0b3dc6f87
SHA256 bc86e8b152ed97cb72c0311e48d51aead3a0e710018aa9a2a8c4ec1b630655c4
MD5 46507a45aa79677197727047c63cc997
SHA1 f42c53191d094302575314257d729748d2b8adc8
SHA512 46ba40ccbc300919dd1bdf8923c21237ab8a9a26e075dac67c5c19d5ee05d1f59cfc5909b93bac95daacc5d9b1c2a089aa08649e0d3e3e55416efb221992e774
SSDEEP 3072:YGa8GTsKzYFXWRpbbQlV082OvAsuKW285MCpyDuN/sNvvMzeLq+c1WPE68EnqV1:YVLkEbQV/2kAnKUfd8v0KLk368n1
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

50:c5:ae:c8:00:4c:51:38:71:7c:be:61:d2:67:de:db:64:7d:c0:02:90:7c:1e:18:91:85:ba:9c:6a:96:f2:cf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

6624

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DosDateTimeToFileTime EnterCriticalSection EnumCalendarInfoA EnumUILanguagesA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileW FindNextFileW FindResourceW FlushInstructionCache FormatMessageW FreeLibrary FreeResource GenerateConsoleCtrlEvent GetACP GetCPInfo GetCommandLineW GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceExW GetDiskFreeSpaceW GetEnvironmentVariableW GetExitCodeThread GetFileAttributesW GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleW GetNamedPipeHandleStateW GetOverlappedResult GetPrivateProfileSectionW GetPrivateProfileStringW GetProcAddress GetStartupInfoA GetStdHandle GetSystemDefaultLCID GetSystemInfo GetSystemTime GetTempFileNameW GetTempPathW GetThreadLocale GetThreadSelectorEntry GetTickCount GetTimeZoneInformation GetVersion GetVersionExW GetVolumeInformationA GetWindowsDirectoryW GlobalAddAtomW GlobalDeleteAtom GlobalFindAtomW GlobalFree HeapCreate HeapDestroy InitAtomTable InitializeCriticalSection InterlockedCompareExchange CreateThread InterlockedExchange InterlockedExchangeAdd InterlockedIncrement IsBadReadPtr IsDBCSLeadByte IsValidLocale LeaveCriticalSection LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFileTimeToFileTime LocalFree LockResource MapViewOfFile Module32FirstW MoveFileExW MoveFileW MulDiv MultiByteToWideChar OpenFileMappingW OpenProcess OpenSemaphoreA OutputDebugStringW RaiseException ReadFile ReplaceFile ResetEvent ResetWriteWatch ResumeThread RtlUnwind SearchPathW SetComputerNameW SetConsoleOutputCP SetEndOfFile SetEnvironmentVariableW SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetFileTime SetLastError SetStdHandle SetThreadLocale SignalObjectAndWait SizeofResource Sleep SwitchToThread SystemTimeToFileTime TerminateProcess TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile VirtualFree VirtualProtect VirtualQuery VirtualQueryEx WaitForMultipleObjectsEx WaitForSingleObject WideCharToMultiByte WinExec WriteFile WritePrivateProfileStringA WritePrivateProfileStringW WriteProcessMemory lstrcpyW lstrcpynW lstrlenW CreateProcessW CreateFileW CreateFileMappingW CreateFileA CreateEventW CreateDirectoryW CreateDirectoryExW CopyFileExA CompareStringW CompareStringA CloseHandle CancelTimerQueueTimer VirtualAlloc InterlockedDecrement GetModuleHandleA

user32

CloseDesktop GetListBoxInfo CloseWindowStation WindowFromDC DestroyWindow IsMenu OpenIcon GetFocus CharToOemA CharToOemBuffA CharToOemBuffW CharUpperA CharUpperW CopyIcon CopyRect CreateWindowExW DefWindowProcW DestroyIcon DialogBoxParamW DispatchMessageW EnableWindow EndDialog FindWindowExW GetClassNameW GetClientRect GetDC GetDesktopWindow GetDlgItem GetDlgItemTextW GetMessagePos GetMessageW GetParent GetSysColor GetSystemMetrics GetWindow GetWindowLongW GetWindowRect GetWindowTextW InflateRect InvalidateRect IsWindow IsWindowVisible KillTimer LoadBitmapW LoadCursorW LoadIconW LoadStringW MapWindowPoints MessageBeep MessageBoxW OemToCharA OemToCharBuffA PeekMessageW PostMessageW PtInRect RegisterClassExW ReleaseDC ScreenToClient SendDlgItemMessageW SendMessageW SetCursor SetDlgItemTextW SetFocus SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow TranslateMessage UpdateWindow WaitForInputIdle wvsprintfA wvsprintfW CreateMenu IsCharAlphaNumericW ReleaseCapture CharNextW GetMessageExtraInfo IsClipboardFormatAvailable InSendMessage EndMenu DrawMenuBar IsCharUpperA IsWindowEnabled GetDialogBaseUnits GetDoubleClickTime IsWindowUnicode CloseWindow

gdi32

CreatePatternBrush CloseFigure DeleteObject DeleteEnhMetaFile GetObjectType SaveDC

advapi32

SetFileSecurityA RegSetValueExW RegCloseKey AdjustTokenPrivileges RegOpenKeyA RegQueryValueExW SetFileSecurityW

Sharing

General

Malware Config

Signatures

File Explorer

bc86e8b152ed97cb72c0311e48d51aead3a0e710018aa9a2a8c4ec1b630655c4

PE Signature issue

kernel32

user32

gdi32

advapi32