bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0

General

Target
bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0
Size 1.8MB
Sample230816-prcjascf3y
SHA256 bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0
MD5 e5cbc0114ff238740e72e907ad20223c
SHA1 98c5d3c714adb3fbef71c19eaaa53cb680dd2d91
SHA512 7049adad987de004b179198aa72910c9bc47f5f0095032cc44a9c409bc6337150b05a208e47919e276c74bbbb9bfa1bee6b58575b2176083e0210af6ce9c9b92
SSDEEP 49152:bm/7cijxOPr17ocI5ut5TrCEJ5GtFRpr:bm/7cijcPr9ocI5K5NjGnL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0

File Explorer

bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0

.exe 1.8MB

bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0

IMPHASH d318a260f63cbb9427df058a9e28a3ac
SHA256 bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0
MD5 e5cbc0114ff238740e72e907ad20223c
SHA1 98c5d3c714adb3fbef71c19eaaa53cb680dd2d91
SHA512 7049adad987de004b179198aa72910c9bc47f5f0095032cc44a9c409bc6337150b05a208e47919e276c74bbbb9bfa1bee6b58575b2176083e0210af6ce9c9b92
SSDEEP 49152:bm/7cijxOPr17ocI5ut5TrCEJ5GtFRpr:bm/7cijcPr9ocI5K5NjGnL
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14328

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleTextAttribute InterlockedDecrement GetCurrentProcess QueryPerformanceCounter SetHandleInformation GetProfileStringW OpenSemaphoreA GetSystemDefaultLCID GetTickCount GetWindowsDirectoryA WaitNamedPipeW GetUserDefaultLangID GetCommandLineA GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleMode ReadConsoleInputA _hread GetCalendarInfoW GetSystemWindowsDirectoryA GetExitCodeProcess GetTimeFormatW GetConsoleAliasW SetConsoleCursorPosition GetFileAttributesW lstrcatA QueryInformationJobObject GetStartupInfoW CreateJobObjectA InterlockedExchange EndUpdateResourceW OpenMutexW GetCurrentDirectoryW SetLastError GetProcAddress MoveFileW GlobalGetAtomNameA OpenWaitableTimerA LoadLibraryA GetFileType MoveFileA BuildCommDCBAndTimeoutsW GetNumberFormatW AddAtomW FindNextFileA EnumDateFormatsA GetModuleHandleA FreeEnvironmentStringsW CreateMailslotA PeekConsoleInputA SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA ReadConsoleInputW FindFirstVolumeW GetVolumeNameForVolumeMountPointW DebugBreak ResetWriteWatch ReadConsoleOutputCharacterW EnumSystemLocalesW DeleteFileA DeleteVolumeMountPointA GetConsoleAliasExesLengthA GetConsoleAliasExesA GetStartupInfoA GetDateFormatW GetLastError HeapFree WideCharToMultiByte HeapAlloc GetCommandLineW HeapSetInformation DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess HeapCreate GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer Sleep LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent RtlUnwind SetStdHandle WriteConsoleW HeapReAlloc HeapSize FlushFileBuffers ReadFile CreateFileW CloseHandle RaiseException

gdi32

GetTextFaceA GetCharABCWidthsA SelectPalette GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

bdf326424f960a66d01dd645db9fd335a157ceb86d7f482ff15205fa7d9cc7b0

kernel32

gdi32