bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08

General

Target
bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08
Size 452KB
Sample231208-lva8vsad95
SHA256 bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08
MD5 a87fab5ef51df54563c1752f4cc5b466
SHA1 1e29f9771c034545e618cdb28e12f1004993f8bf
SHA512 2369d6b6769853ff7246031bb7081261a6ecc67590e424f2845337291cc0a1241c24fc2ed340deb8f999befa5dea237df2000c5a0bf0f1e410d2394e0735df65
SSDEEP 6144:lNOKA8716v7ae1wR/+0rtDVgfcw3vR2vRz5Datp8E2lv2avF:lsi716eGwIQDGfh3v+z5WtkR26
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08

File Explorer

bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08

.dll 452KB

bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08

IMPHASH 5b0a744a028d638abc7f791101016faf
SHA256 bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08
MD5 a87fab5ef51df54563c1752f4cc5b466
SHA1 1e29f9771c034545e618cdb28e12f1004993f8bf
SHA512 2369d6b6769853ff7246031bb7081261a6ecc67590e424f2845337291cc0a1241c24fc2ed340deb8f999befa5dea237df2000c5a0bf0f1e410d2394e0735df65
SSDEEP 6144:lNOKA8716v7ae1wR/+0rtDVgfcw3vR2vRz5Datp8E2lv2avF:lsi716eGwIQDGfh3v+z5WtkR26
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10765

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

VirtualFree GetWindowsDirectoryA Sleep CreateSemaphoreA CreateDirectoryA VirtualAlloc CopyFileA VirtualProtectEx ResetEvent GetModuleFileNameA GetTempPathA GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind CloseHandle GetProcAddress GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection GetCPInfo GetACP GetOEMCP MultiByteToWideChar WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer SetStdHandle CreateFileA HeapReAlloc LoadLibraryA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile SetEndOfFile HeapSize

ws2_32

WSACleanup WSAWaitForMultipleEvents WSAStartup

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

bc0b57f04efe4239fcc02f049c97016c653c963de8cbe45bcf9449cd16919f08

kernel32

ws2_32

generic