bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169

General

Target
bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169
Size 1.6MB
Sample231127-fpzflsee95
SHA256 bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169
MD5 3ff60bb00b635f8d94673252138c1319
SHA1 a41e71b7583d5b49f82b6afaab70f9d89c77e4d5
SHA512 2d1da58a7021c9932a37f9be4569c19483b4a2dc169ccf0f978d21aa7720bb4bb7b822de693deebf2bedd0c12e370fc43ff7f0498cfa85d0ba0bf6da36d64d26
SSDEEP 49152:5ojy+A3cPEDkG+4LNl1R0FuWrDn74Vy6cewVs0B1H0:5ojyUMDVBr0FnrDTVtZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169

File Explorer

bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169

.exe 1.6MB

bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169

IMPHASH d9b8e12db6ebdeeb9f1d584d3e045bb8
SHA256 bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169
MD5 3ff60bb00b635f8d94673252138c1319
SHA1 a41e71b7583d5b49f82b6afaab70f9d89c77e4d5
SHA512 2d1da58a7021c9932a37f9be4569c19483b4a2dc169ccf0f978d21aa7720bb4bb7b822de693deebf2bedd0c12e370fc43ff7f0498cfa85d0ba0bf6da36d64d26
SSDEEP 49152:5ojy+A3cPEDkG+4LNl1R0FuWrDn74Vy6cewVs0B1H0:5ojyUMDVBr0FnrDTVtZ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

44650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoGetObjectContext CoGetApartmentType

kernel32

GetCPInfo SetEndOfFile HeapSize LoadLibraryW RaiseException CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW WideCharToMultiByte MultiByteToWideChar GetStringTypeW InitOnceBeginInitialize InitOnceComplete GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WriteConsoleW InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess ReadConsoleW RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx FlushFileBuffers ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

bcde1b6a52ee2944096fc1b3059f09097add88eb3a99bee162613dc12a113169

ole32

kernel32

generic