bd1a2b21480607e6cfbaa32fdde275e7

General

Target
bd1a2b21480607e6cfbaa32fdde275e7
Size 585KB
Sample240309-3ms75sef4t
SHA256 214df5507adf45f0a1e026b06a234bae33ddffc81826462c426240cf2c709672
MD5 bd1a2b21480607e6cfbaa32fdde275e7
SHA1 2ad0992b20b716167cf60e39af7daa54d1dacb21
SHA512 8f1ab4b0d1d5d67f91b5d26cd3d258b791d1641698124f7b61568e9a0edd79141f3375d402b63d9f46b1d6874ff1117fef667caab050521e3a74d24940be7d63
SSDEEP 12288:JL8mulKGLQ1ns/TUj1rwWsYMhwPfOOfJ7Zv+I4Id0Z7zpS:JMKGLQ1ns/PMGORtWHIYd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd1a2b21480607e6cfbaa32fdde275e7

File Explorer

bd1a2b21480607e6cfbaa32fdde275e7

.exe 585KB

bd1a2b21480607e6cfbaa32fdde275e7

IMPHASH ca59243ab9216853b8ca72d3a7c666db
SHA256 214df5507adf45f0a1e026b06a234bae33ddffc81826462c426240cf2c709672
MD5 bd1a2b21480607e6cfbaa32fdde275e7
SHA1 2ad0992b20b716167cf60e39af7daa54d1dacb21
SHA512 8f1ab4b0d1d5d67f91b5d26cd3d258b791d1641698124f7b61568e9a0edd79141f3375d402b63d9f46b1d6874ff1117fef667caab050521e3a74d24940be7d63
SSDEEP 12288:JL8mulKGLQ1ns/TUj1rwWsYMhwPfOOfJ7Zv+I4Id0Z7zpS:JMKGLQ1ns/PMGORtWHIYd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\feni.pdb

kernel32

SetFilePointer lstrlenA FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile TlsSetValue GetEnvironmentStrings GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile GetBinaryTypeW ExitThread DeactivateActCtx CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCurrentDirectoryW GetProcAddress VerLanguageNameA CreateNamedPipeA SetStdHandle SetComputerNameA BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW VirtualLock WriteProfileStringA SetConsoleTitleW VirtualProtect CompareStringA GetFileAttributesExW GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW GetModuleHandleA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType GetConsoleCP GetConsoleMode DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

bd1a2b21480607e6cfbaa32fdde275e7

kernel32

user32

generic