bfe0a34bb6494a9b1e866efe97ccd11b[.]exe

General

Target
bfe0a34bb6494a9b1e866efe97ccd11b.exe
Size 273KB
Sample230302-nmrlzscf87
SHA256 8a2ed465f876e200314451371c46e38ddb7dae622efe7f60bb7d58d9291651d5
MD5 bfe0a34bb6494a9b1e866efe97ccd11b
SHA1 2222524e5bf603c3166ed445ae5f94f2ebe1fc6e
SHA512 9520cace14670c5aff3fcad7476c231d04b4a8b152f0af12cabbcc1a4947ca9007a2a65e3cf010e9a6dfd0f2388cc58def7d8e28338c3f516c0733613e28111c
SSDEEP 6144:5qgB6W89GHqzCzKDJUF3sIcqZi5WZbvEeTqa48Hd/:5qgB6bGHqzCGUF3niUHz485
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bfe0a34bb6494a9b1e866efe97ccd11b.exe

.exe 273KB

bfe0a34bb6494a9b1e866efe97ccd11b.exe

IMPHASH 4054b693d3c05398378812172a4ea0e8
SHA256 8a2ed465f876e200314451371c46e38ddb7dae622efe7f60bb7d58d9291651d5
MD5 bfe0a34bb6494a9b1e866efe97ccd11b
SHA1 2222524e5bf603c3166ed445ae5f94f2ebe1fc6e
SHA512 9520cace14670c5aff3fcad7476c231d04b4a8b152f0af12cabbcc1a4947ca9007a2a65e3cf010e9a6dfd0f2388cc58def7d8e28338c3f516c0733613e28111c
SSDEEP 6144:5qgB6W89GHqzCzKDJUF3sIcqZi5WZbvEeTqa48Hd/:5qgB6bGHqzCGUF3niUHz485
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

21013

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReleaseMutex ReadConsoleInputW VerifyVersionInfoW GetCPInfoExW CreateEventW SetLocaleInfoA GetProcAddress GlobalAlloc DeleteFileA EnumResourceTypesW GetBinaryTypeA SetLastError LocalFlags WriteProfileStringW GetComputerNameExA GetConsoleAliasA WriteProfileSectionW SetSystemPowerState FindFirstVolumeMountPointW GetModuleHandleW EnumResourceLanguagesA SetDefaultCommConfigW EnumTimeFormatsA GetCurrentActCtx DeleteVolumeMountPointW GetStartupInfoW IsProcessInJob WritePrivateProfileStringA FoldStringA GetShortPathNameA FindNextFileA EnumCalendarInfoW LocalAlloc CreateEventA GetLastError RtlCaptureContext GetStringTypeExA GetWindowsDirectoryA SetVolumeMountPointA LoadLibraryA DecodePointer EncodePointer GetCommandLineW HeapSetInformation IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess ExitProcess WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapFree Sleep RtlUnwind SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW LCMapStringW MultiByteToWideChar GetStringTypeW HeapAlloc HeapReAlloc WriteConsoleW HeapSize CloseHandle CreateFileW

gdi32

GetBoundsRect

advapi32

GetKernelObjectSecurity

Sharing