16bcbac323177a8dc675842da7a747b5

General

Target
16bcbac323177a8dc675842da7a747b5
Size 11.7MB
Sample231230-m7bwlaeecq
SHA256 502b7364888847bc65c657848e93de14b35eaa032bba197c496ef2a3fef4958f
MD5 16bcbac323177a8dc675842da7a747b5
SHA1 189a9990e8ac88ab8a3d916558f03bca210bd29d
SHA512 8d7b1a8c4345cbc05634c5e3c69f7a09a0fc991ab34c8cb1771e16b8e6726216736b8101b57f75f00ed54dff0452de75a238737f0783f9153b07d42e30df0068
SSDEEP 6144:zdaQnsbMlI3TiGnvGwJm6DwURRTzoVvaEZ7+XgJ1cPBQD79VVVVVVVVVVVVVVVV5:zdVi3TiGnvGlULRRTzoBaq+XcsyD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16bcbac323177a8dc675842da7a747b5

File Explorer

16bcbac323177a8dc675842da7a747b5

.exe 11.7MB

16bcbac323177a8dc675842da7a747b5

IMPHASH 1805ee8d5911749b9c03ec2fc15f679b
SHA256 502b7364888847bc65c657848e93de14b35eaa032bba197c496ef2a3fef4958f
MD5 16bcbac323177a8dc675842da7a747b5
SHA1 189a9990e8ac88ab8a3d916558f03bca210bd29d
SHA512 8d7b1a8c4345cbc05634c5e3c69f7a09a0fc991ab34c8cb1771e16b8e6726216736b8101b57f75f00ed54dff0452de75a238737f0783f9153b07d42e30df0068
SSDEEP 6144:zdaQnsbMlI3TiGnvGwJm6DwURRTzoVvaEZ7+XgJ1cPBQD79VVVVVVVVVVVVVVVV5:zdVi3TiGnvGlULRRTzoBaq+XcsyD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

29488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize SearchPathW WritePrivateProfileStructA GetConsoleAliasesLengthW TlsGetValue SetLocalTime CommConfigDialogA FindResourceExW GetProcessIoCounters FreeLibrary CallNamedPipeA GetCommState InterlockedDecrement ZombifyActCtx ScrollConsoleScreenBufferW SetDefaultCommConfigW GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock SetConsoleScreenBufferSize SetComputerNameW GetComputerNameW CreateDirectoryExA CreateNamedPipeW GetPrivateProfileStringW WriteFileGather SetProcessPriorityBoost GetSystemDirectoryW GetConsoleMode SetCommConfig SizeofResource GetSystemWow64DirectoryW GetSystemTimeAdjustment InterlockedPopEntrySList GlobalFlags ReadFile GetBinaryTypeW GetOverlappedResult CompareStringW ExitThread lstrlenW GetStartupInfoW VerifyVersionInfoW CreateDirectoryA GetProfileIntA SetCurrentDirectoryA OpenMutexW GetCurrentDirectoryW GetThreadLocale ReadConsoleOutputCharacterA GetProcessHeaps SetVolumeLabelW WriteProfileSectionA SetStdHandle FreeUserPhysicalPages GetAtomNameA LoadLibraryA LocalAlloc SetCalendarInfoW SetConsoleCtrlHandler SetConsoleWindowInfo GetTapeParameters WTSGetActiveConsoleSessionId SetConsoleTitleW GetModuleHandleA GetProcessShutdownParameters CreateMutexA FreeEnvironmentStringsW RequestWakeupLatency VirtualProtect GetCPInfoExA GetVersionExA FindAtomW GetWindowsDirectoryW GetVersion GetVolumeNameForVolumeMountPointW DeleteFileW FindActCtxSectionStringW GetProfileSectionW LCMapStringW CopyFileExA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException RtlUnwind GetProcAddress GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetLastError GetACP GetOEMCP GetCPInfo IsValidCodePage DebugBreak GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW ExitProcess LoadLibraryW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

user32

GetComboBoxInfo GetCursorInfo

Sharing

General

Malware Config

Signatures

File Explorer

16bcbac323177a8dc675842da7a747b5

kernel32

user32

generic