bbf2a209d065eedf11c012c51ccd0ba5e4b229a61782582e46c7b08907e38bd6

General

Target
bbf2a209d065eedf11c012c51ccd0ba5e4b229a61782582e46c7b08907e38bd6
Size 4.2MB
Sample231011-bd45habe65
SHA256 bbf2a209d065eedf11c012c51ccd0ba5e4b229a61782582e46c7b08907e38bd6
MD5 9e0ef4c6d1eec38b5c641c56fb427489
SHA1 96b30c0857fcf70e206c27afdab5fd0abd95cfa5
SHA512 152f336345c4bb6ae30a9bf0e277f1ab8c2f6c1102f866829008762706b590b9e1308adbdec8b6d2005db94c2b24aff0e92daa913f2af476571c08d188692e51
SSDEEP 98304:uZyA6X3gIoba/EcdKRA5UdKmiZnJW3BtjZJR5m67Kvi6S2Qu46G:SyA6HgAqHgmiZJW3BtjZJRzKK67B46G
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bbf2a209d065eedf11c012c51ccd0ba5e4b229a61782582e46c7b08907e38bd6

.exe 4.2MB

bbf2a209d065eedf11c012c51ccd0ba5e4b229a61782582e46c7b08907e38bd6

IMPHASH c0a3c238d9ecfd3e9ab3d94bcbfed84e
SHA256 bbf2a209d065eedf11c012c51ccd0ba5e4b229a61782582e46c7b08907e38bd6
MD5 9e0ef4c6d1eec38b5c641c56fb427489
SHA1 96b30c0857fcf70e206c27afdab5fd0abd95cfa5
SHA512 152f336345c4bb6ae30a9bf0e277f1ab8c2f6c1102f866829008762706b590b9e1308adbdec8b6d2005db94c2b24aff0e92daa913f2af476571c08d188692e51
SSDEEP 98304:uZyA6X3gIoba/EcdKRA5UdKmiZnJW3BtjZJR5m67Kvi6S2Qu46G:SyA6HgAqHgmiZJW3BtjZJRzKK67B46G
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

PE Signature issue

Digest

a5:69:dd:30:b0:83:c5:7a:94:36:d9:e8:7d:d9:8b:3b:81:58:28:96:ec:54:e5:f4:40:b3:59:15:bc:f1:cb:b4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10812,ST=0b1c1115005f5c4e0f020a1000040b140d120e5b1010+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Chains

Oct 4, 2023

Minor OS version

1

Major OS version

5

Entry point

19977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempFileNameW SetVolumeLabelA SetDefaultCommConfigA FindResourceA GetModuleHandleExA GetLocaleInfoA CommConfigDialogA FindResourceExW OpenJobObjectA ReadConsoleA InterlockedDecrement QueryPerformanceCounter GetEnvironmentStringsW InterlockedCompareExchange WriteConsoleInputA SetComputerNameW CreateHardLinkA FreeEnvironmentStringsA SetTapeParameters SetThreadUILanguage GetConsoleAliasesA GetConsoleAliasesLengthA ConvertFiberToThread GetConsoleTitleA ReadConsoleW GetCompressedFileSizeW GetConsoleAliasExesW WaitNamedPipeW WriteFile EnumTimeFormatsW GetCommandLineA GetDriveTypeA GetVolumePathNameW GetEnvironmentStrings GetConsoleCP GlobalAlloc LoadLibraryW GetConsoleMode FatalAppExitW ReadConsoleInputA GetCalendarInfoW DeleteVolumeMountPointW GetFileAttributesA GetComputerNameA SetSystemPowerState IsDBCSLeadByte CreateFileW FindNextVolumeMountPointW GetStartupInfoW CreateMailslotW GetShortPathNameA GetNamedPipeHandleStateW FindFirstFileA GetLastError SetLastError ReadConsoleOutputCharacterA RemoveDirectoryA CopyFileA FreeUserPhysicalPages FindClose GetAtomNameA MoveFileA BuildCommDCBAndTimeoutsW GetCommMask AddAtomA HeapWalk GetPrivateProfileSectionNamesA GetOEMCP FindNextFileA _lread GetModuleHandleA GetStringTypeW VirtualProtect EnumDateFormatsW QueryPerformanceFrequency PeekConsoleInputA GetShortPathNameW SetCalendarInfoA OpenSemaphoreW FindFirstVolumeA GetWindowsDirectoryW DeleteFileW ReadConsoleOutputCharacterW FlushFileBuffers SetStdHandle EnumSystemCodePagesA GetVolumeNameForVolumeMountPointA HeapFree HeapAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer DeleteFileA WideCharToMultiByte HeapReAlloc GetCommandLineW HeapSetInformation RaiseException IsProcessorFeaturePresent HeapCreate EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetModuleFileNameW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetCPInfo GetACP IsValidCodePage CloseHandle FreeEnvironmentStringsW GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer RtlUnwind HeapSize LCMapStringW MultiByteToWideChar WriteConsoleW

user32

CharUpperA CharUpperBuffA

gdi32

GetTextFaceA

winhttp

WinHttpWriteData

Sharing

General

Malware Config

Signatures

File Explorer

bbf2a209d065eedf11c012c51ccd0ba5e4b229a61782582e46c7b08907e38bd6

PE Signature issue

kernel32

user32

gdi32

winhttp