bfc9048b5381ff08e29ca318b0cacd70[.]exe

General

Target
bfc9048b5381ff08e29ca318b0cacd70.exe
Size 216KB
Sample240121-mm5yyabge3
SHA256 5dee4356ac787ee4f83cfe7268df01b8b6c77ef42cfcd98ed3773745780fcdd2
MD5 bfc9048b5381ff08e29ca318b0cacd70
SHA1 ff11d18cce7d80134b0e211ba154be3775e559b8
SHA512 cb3cd3fac0f4bef1035e71f003a0ec585a621d5ab9d0ec5f727e7ba40c969c4eed8b42e4f8232c5dd33295e64263951e485b15b31031f9a6d31a49b4885503e0
SSDEEP 3072:R02xEu9fAZYC8Wa+cb41u76ZGcJzJnmsawZt7/zZoUxUHw:RjWu9fqYr6ZXVawTC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc9048b5381ff08e29ca318b0cacd70.exe

File Explorer

bfc9048b5381ff08e29ca318b0cacd70.exe

.exe 216KB

bfc9048b5381ff08e29ca318b0cacd70.exe

IMPHASH 68649466e471cf2dfe1fd81ad3f6e2a5
SHA256 5dee4356ac787ee4f83cfe7268df01b8b6c77ef42cfcd98ed3773745780fcdd2
MD5 bfc9048b5381ff08e29ca318b0cacd70
SHA1 ff11d18cce7d80134b0e211ba154be3775e559b8
SHA512 cb3cd3fac0f4bef1035e71f003a0ec585a621d5ab9d0ec5f727e7ba40c969c4eed8b42e4f8232c5dd33295e64263951e485b15b31031f9a6d31a49b4885503e0
SSDEEP 3072:R02xEu9fAZYC8Wa+cb41u76ZGcJzJnmsawZt7/zZoUxUHw:RjWu9fqYr6ZXVawTC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA HeapAlloc FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetConsoleAliasesA TlsSetValue LoadLibraryW LocalShrink GetConsoleAliasExesLengthW GetAtomNameW GetEnvironmentVariableA CompareStringW SetConsoleTitleA WritePrivateProfileStringW IsBadStringPtrW InterlockedExchange GetLastError GetProcAddress SetComputerNameA PrepareTape LoadLibraryA OpenWaitableTimerW LocalAlloc SetCalendarInfoW OpenJobObjectW GetTapeParameters GetModuleFileNameA CompareStringA LocalFree RaiseException FindResourceA GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep FatalAppExitA SetConsoleCtrlHandler FreeLibrary GetLocaleInfoW RtlUnwind SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW HeapReAlloc IsProcessorFeaturePresent HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileW CloseHandle FlushFileBuffers

advapi32

OpenEventLogW

Sharing