bf7782fe90a4ac160b74d33652b1d708f0e41de2c53782d3bb1e265dd5c44de0

Sharing

Copy URL Twitter E-mail

General

Target
bf7782fe90a4ac160b74d33652b1d708f0e41de2c53782d3bb1e265dd5c44de0
Size 1.4MB
Sample231014-c6bt4acc61
SHA256 bf7782fe90a4ac160b74d33652b1d708f0e41de2c53782d3bb1e265dd5c44de0
MD5 94eb172192db34708f96960d27b16ae5
SHA1 c8ddfbbde642992ece5322f18155ff3cda8b3970
SHA512 46d93e681d61cfd3aca143deb194c5230337687b943147b8da667db441c7011418ec437aecdd4ff8c1856b2619f7ba57170af8c8f7b3d8aa22027d06818e225e
SSDEEP 12288:aCKeGGfG6udZpIcJPQLGCQaOHbOceDg6frUgVBy9:aCKeGG8dZ/QiuOCcQg6DUgVE9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7782fe90a4ac160b74d33652b1d708f0e41de2c53782d3bb1e265dd5c44de0

File Explorer

bf7782fe90a4ac160b74d33652b1d708f0e41de2c53782d3bb1e265dd5c44de0

.exe 1.4MB

bf7782fe90a4ac160b74d33652b1d708f0e41de2c53782d3bb1e265dd5c44de0

IMPHASH 47d9c05d55bbc3899f831347ecc6bf93
SHA256 bf7782fe90a4ac160b74d33652b1d708f0e41de2c53782d3bb1e265dd5c44de0
MD5 94eb172192db34708f96960d27b16ae5
SHA1 c8ddfbbde642992ece5322f18155ff3cda8b3970
SHA512 46d93e681d61cfd3aca143deb194c5230337687b943147b8da667db441c7011418ec437aecdd4ff8c1856b2619f7ba57170af8c8f7b3d8aa22027d06818e225e
SSDEEP 12288:aCKeGGfG6udZpIcJPQLGCQaOHbOceDg6frUgVBy9:aCKeGG8dZ/QiuOCcQg6DUgVE9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

165615

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexA SetLastError GetCurrentThreadId DeleteCriticalSection FlushInstructionCache GetCurrentProcess EnterCriticalSection LeaveCriticalSection InterlockedIncrement InterlockedDecrement GetModuleHandleW lstrlenW InitializeCriticalSection FreeLibrary MultiByteToWideChar LoadLibraryExW lstrcmpiW GetProcAddress ReleaseMutex GetLastError GetCurrentProcessId OpenProcess TerminateProcess CreateToolhelp32Snapshot HeapWalk HeapLock OpenThread HeapUnlock OutputDebugStringW GetFileSizeEx SetFilePointerEx SetEndOfFile LocalFileTimeToFileTime SystemTimeToFileTime SetEnvironmentVariableA CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetTimeZoneInformation GetLocaleInfoW Process32FirstW GetConsoleCP IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID Process32NextW CloseHandle InterlockedCompareExchange Sleep FindResourceExW LoadResource LockResource SizeofResource FindResourceW RaiseException GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringA InitializeCriticalSectionAndSpinCount InterlockedExchange SetConsoleCtrlHandler GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStdHandle FatalAppExitA GetModuleFileNameW GetCommandLineW HeapCreate LCMapStringW GetCurrentThread TlsFree TlsSetValue TlsAlloc TlsGetValue IsValidCodePage GetOEMCP GetACP GetCPInfo RtlUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime ExitProcess GetStartupInfoW CreateThread ExitThread FreeResource GetVersionExW GetSystemWindowsDirectoryW lstrlenA lstrcmpiA lstrcmpA LocalFree GetConsoleMode HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LoadLibraryA IsProcessorFeaturePresent VirtualFree VirtualAlloc CreateFileW SetFilePointer LoadLibraryW ReadFile DeviceIoControl WriteFile FlushFileBuffers GetTempPathW DeleteFileW OpenMutexW CreateMutexW WaitForSingleObject WideCharToMultiByte GetSystemDirectoryW CreateFileA

user32

GetActiveWindow DefWindowProcW FindWindowW SendMessageTimeoutW MessageBoxW UnregisterClassA DispatchMessageW TranslateMessage GetMessageW PeekMessageW DestroyWindow wsprintfW CreateDialogParamW GetParent GetWindow GetWindowRect GetWindowLongW MonitorFromWindow GetMonitorInfoW GetClientRect MapWindowPoints SetWindowPos IsDialogMessageW SendMessageW SetWindowTextW PostMessageW PostQuitMessage GetSystemMetrics LoadImageW CharNextW SetWindowLongW ShowWindow

advapi32

RegCreateKeyExW OpenProcessToken RegOpenKeyExA RegQueryValueExW RegQueryInfoKeyW RegSetValueExW RegEnumKeyExW RegOpenKeyExW GetTokenInformation RegCloseKey RegDeleteValueW RegDeleteKeyW RegEnumKeyExA RegQueryValueExA

shell32

ShellExecuteExW CommandLineToArgvW ShellExecuteW ord165

ole32

CoInitializeEx CoSetProxyBlanket CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree CoInitialize CoCreateGuid CoCreateInstance CoInitializeSecurity CoUninitialize

oleaut32

SysAllocString SysFreeString VarUI4FromStr VariantInit VariantClear

shlwapi

StrToIntExW SHGetValueA PathIsDirectoryW PathAppendW PathFileExistsW PathCombineW SHSetValueA StrTrimA StrCmpNIW StrStrIA PathRemoveExtensionW StrStrIW SHGetValueW SHDeleteValueW SHSetValueW StrCmpIW PathFindFileNameW

comctl32

InitCommonControlsEx

setupapi

SetupIterateCabinetW

wininet

InternetOpenW InternetCloseHandle InternetReadFile HttpOpenRequestW InternetConnectW HttpSendRequestW InternetQueryOptionW InternetSetOptionW HttpQueryInfoW InternetCrackUrlW

ws2_32

htons closesocket gethostbyname connect inet_ntoa send recv socket WSAStartup WSACleanup

version

VerQueryValueW

iphlpapi

GetAdaptersInfo