bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec

Sharing

Copy URL Twitter E-mail

General

Target
bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec
Size 1.5MB
Sample230831-k1lfcaec53
SHA256 bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec
MD5 c646338e3db607d1b05f4cc078656bbb
SHA1 2accdfe05e4d50a2c2dc5596313b9ed87cd09e14
SHA512 3e98acaac466db3530fed1d7bc850f20b89b467d77d67c8c40f029e89cb796ef4fce94b49279ca975dc24402534bb6274e8dc2163e6dacb2a1c55db6f61c9715
SSDEEP 24576:eYVLN+uGOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:BTT3HPkVOBTK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec

File Explorer

bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec

.exe 1.5MB

bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec

IMPHASH 729ab4da9f34412c8013b3726badf296
SHA256 bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec
MD5 c646338e3db607d1b05f4cc078656bbb
SHA1 2accdfe05e4d50a2c2dc5596313b9ed87cd09e14
SHA512 3e98acaac466db3530fed1d7bc850f20b89b467d77d67c8c40f029e89cb796ef4fce94b49279ca975dc24402534bb6274e8dc2163e6dacb2a1c55db6f61c9715
SSDEEP 24576:eYVLN+uGOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:BTT3HPkVOBTK
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42740

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind RaiseException GetStartupInfoA GetCommandLineA TerminateProcess HeapSize GetACP GetTimeZoneInformation SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetVersionExA HeapDestroy HeapCreate IsBadWritePtr LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetProfileStringA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime FormatMessageA GetOEMCP GetCPInfo GetFileTime GetFileSize GetFileAttributesA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetThreadLocale GetProcessVersion TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc SizeofResource MultiByteToWideChar WideCharToMultiByte InterlockedIncrement GetLastError InterlockedDecrement GlobalFlags MulDiv lstrcpynA GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA SetLastError lstrlenA WritePrivateProfileStringA CloseHandle GetModuleFileNameA GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId GlobalLock GlobalUnlock GlobalFree LockResource FindResourceA LoadResource ExitProcess IsBadReadPtr LoadLibraryA GetProcAddress VirtualProtect VirtualAlloc FreeLibrary VirtualFree HeapReAlloc HeapAlloc GetProcessHeap GetEnvironmentVariableA HeapFree

user32

GetSysColorBrush LoadStringA CharNextA CopyAcceleratorTableA SetRect GetNextDlgGroupItem MessageBeep CharUpperA InflateRect InvertRect FillRect GetDCEx LockWindowUpdate RegisterClipboardFormatA PostThreadMessageA GetTopWindow IsChild GetCapture WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect SetTimer KillTimer WaitMessage MapDialogRect EndPaint wsprintfA SetFocus ShowWindow SetWindowPos MoveWindow SetWindowLongA GetDlgCtrlID GetWindowTextLengthA GetWindowTextA SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetMessageA TranslateMessage DispatchMessageA GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetLastActivePopup MessageBoxA SetCursor ShowOwnedPopups PostMessageA UpdateWindow HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode EnableWindow PostQuitMessage GetNextDlgTabItem EndDialog GetActiveWindow SetActiveWindow IsWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow GetParent GetWindowLongA GetDlgItem IsWindowEnabled GetClassNameA GrayStringA DrawTextA GetWindow TabbedTextOutA SendMessageA LoadCursorA BeginPaint GetWindowDC GetSystemMenu DeleteMenu AppendMenuA IsRectEmpty SetParent PtInRect GetDC ReleaseDC BringWindowToTop InvalidateRect UnpackDDElParam ReuseDDElParam SetMenu LoadMenuA DestroyMenu TranslateAcceleratorA LoadAcceleratorsA ClientToScreen WindowFromPoint GetWindowThreadProcessId GetDesktopWindow ReleaseCapture SetCapture LoadIconA MapWindowPoints GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetClientRect BeginDeferWindowPos CopyRect SetWindowContextHelpId EndDeferWindowPos SetRectEmpty

gdi32

SaveDC RestoreDC GetStockObject SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx SelectClipRgn ExcludeClipRect IntersectClipRect SetTextAlign GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush CreatePatternBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextExtentPoint32A GetTextMetricsA CreateFontIndirectA GetTextColor GetBkColor DPtoLP LPtoDP BitBlt GetMapMode PatBlt SetRectRgn CombineRgn CreateRectRgnIndirect CreateFontA GetCharWidthA DeleteObject CreateCompatibleBitmap CreateCompatibleDC SelectObject StretchDIBits DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox CreateRectRgn CreateDIBitmap GetTextExtentPointA CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegCloseKey RegSetValueExA RegOpenKeyExA RegCreateKeyExA

shell32

DragQueryFileA DragFinish

comctl32

ord17

oledlg

ord8

ole32

CLSIDFromString CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoTaskMemFree CoTaskMemAlloc OleInitialize OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CLSIDFromProgID

olepro32

ord253

oleaut32

SysFreeString SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen

wsock32

WSAStartup WSACleanup