bcfbb584e4bf9d506213bd4d4fb7ae78

General

Target
bcfbb584e4bf9d506213bd4d4fb7ae78
Size 309KB
Sample240309-2jp6msdc5y
SHA256 c8b6a4184413a0b44d5ed4ef5305127e0022d44abdedb721926698473614bde4
MD5 bcfbb584e4bf9d506213bd4d4fb7ae78
SHA1 640386b2b49e0b95ca2fca90896a02c7c216972b
SHA512 626512a36430bd2c56053bedd99f715f9bf71df058d20aa214240d2928f8dbc863c12c03d46ca7d7e6f28b1ce86faa047426e7a3c9f0b2dbdbe933d6a9be64ae
SSDEEP 6144:TohlFdMUw/YogwBvA2scWRK8UlDv/HPOvgEm/s/nK:ATMJ/Yo/vA1cWRcRfMg/QnK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcfbb584e4bf9d506213bd4d4fb7ae78

File Explorer

bcfbb584e4bf9d506213bd4d4fb7ae78

.exe 309KB

bcfbb584e4bf9d506213bd4d4fb7ae78

IMPHASH 69664ea36ab9a3e93e02fa2b7fdf56ab
SHA256 c8b6a4184413a0b44d5ed4ef5305127e0022d44abdedb721926698473614bde4
MD5 bcfbb584e4bf9d506213bd4d4fb7ae78
SHA1 640386b2b49e0b95ca2fca90896a02c7c216972b
SHA512 626512a36430bd2c56053bedd99f715f9bf71df058d20aa214240d2928f8dbc863c12c03d46ca7d7e6f28b1ce86faa047426e7a3c9f0b2dbdbe933d6a9be64ae
SSDEEP 6144:TohlFdMUw/YogwBvA2scWRK8UlDv/HPOvgEm/s/nK:ATMJ/Yo/vA1cWRcRfMg/QnK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hopogohe_hexulizuyuj4 rukor 5.pdb

kernel32

FileTimeToDosDateTime GetNativeSystemInfo lstrlenA CopyFileExW GetStringTypeA GetCPInfo InterlockedIncrement ReadConsoleA InterlockedDecrement CompareFileTime GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags TerminateProcess ReadFile SetThreadPriority GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA GetStartupInfoA SetThreadLocale GetLastError GetProcAddress GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA Process32FirstW GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA CreateIoCompletionPort QueryMemoryResourceNotification EnumResourceNamesA GetCPInfoExA TlsAlloc ReadConsoleOutputCharacterW GetSystemTime DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA GetModuleHandleA

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

bcfbb584e4bf9d506213bd4d4fb7ae78

kernel32

user32

msimg32

generic