bbfa62b6c7c379f1272b0b199d754d8e

Sharing

Copy URL Twitter E-mail

General

Target
bbfa62b6c7c379f1272b0b199d754d8e
Size 496KB
Sample240309-q8dclahb79
SHA256 f6791f317ce9a8151584bd59f746ee5a73e10fe136edaa9cd8b87c3764b1a392
MD5 bbfa62b6c7c379f1272b0b199d754d8e
SHA1 906aa1f059cf51351a02fa2d78bd20e12b4f0d4c
SHA512 0473d624e91442049c90ac892c405622fe473ff373b0f6aa3f99a895b6c4859001aba8fd20db530022d6f186eadf14cb938fb3cb97e9c9fcd57fbde2dab286bf
SSDEEP 12288:hW0d5M1ibCZ87uR7RDdbXtQKDhh25cvU2KlwoH9ya3k:hZM1a5eRBrZX0BlBwh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfa62b6c7c379f1272b0b199d754d8e

File Explorer

bbfa62b6c7c379f1272b0b199d754d8e

.exe 496KB

bbfa62b6c7c379f1272b0b199d754d8e

IMPHASH 5b1f44ed21720db3207ce8a4df707dd7
SHA256 f6791f317ce9a8151584bd59f746ee5a73e10fe136edaa9cd8b87c3764b1a392
MD5 bbfa62b6c7c379f1272b0b199d754d8e
SHA1 906aa1f059cf51351a02fa2d78bd20e12b4f0d4c
SHA512 0473d624e91442049c90ac892c405622fe473ff373b0f6aa3f99a895b6c4859001aba8fd20db530022d6f186eadf14cb938fb3cb97e9c9fcd57fbde2dab286bf
SSDEEP 12288:hW0d5M1ibCZ87uR7RDdbXtQKDhh25cvU2KlwoH9ya3k:hZM1a5eRBrZX0BlBwh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

96509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedDecrement SetFileTime GetLastError MoveFileA WriteFile SetFilePointer GetFileSize GetTickCount CreateFileA GetPrivateProfileSectionA CreateFileMappingA InterlockedIncrement GetFileAttributesA Sleep GetCommandLineA GetCurrentThreadId LockResource LoadResource SizeofResource FindResourceA EnterCriticalSection LeaveCriticalSection GetModuleHandleA GetModuleFileNameA lstrlenW WideCharToMultiByte FreeLibrary LoadLibraryExA lstrcmpiA lstrcpynA IsDBCSLeadByte FindClose FindFirstFileA GetVolumeInformationA lstrlenA GetProcAddress LoadLibraryA FindNextFileA lstrcmpA lstrcatA lstrcpyA OpenMutexA SystemTimeToFileTime GetSystemTime SetSystemTime Process32Next OpenProcess Process32First CreateToolhelp32Snapshot DeviceIoControl GetLocaleInfoW SetStdHandle MultiByteToWideChar GetWindowsDirectoryA GetSystemDirectoryA CreateEventA CreateProcessA WaitForSingleObject CloseHandle SetEndOfFile SetFileAttributesA CopyFileA MoveFileExA GetShortPathNameA DeleteFileA WinExec RaiseException DeleteCriticalSection InitializeCriticalSection GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetVersionExA IsBadCodePtr IsBadReadPtr GetStringTypeW GetStringTypeA IsValidCodePage IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetFileType SetHandleCount CreateDirectoryA GetEnvironmentVariableA ExitProcess RtlUnwind HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapAlloc HeapReAlloc GetStartupInfoA LCMapStringA LCMapStringW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetOEMCP FlushFileBuffers ReadFile GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW

user32

LoadStringA DefWindowProcA DestroyWindow CharNextA

advapi32

RegOpenKeyA SetSecurityDescriptorDacl OpenProcessToken RegEnumKeyExA RegCreateKeyExA RegDeleteValueA RegDeleteKeyA OpenSCManagerA OpenServiceA ChangeServiceConfigA StartServiceA QueryServiceStatus CloseServiceHandle RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey GetUserNameA CreateProcessAsUserA InitializeSecurityDescriptor RegQueryInfoKeyA

ole32

CoInitialize CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoUninitialize

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

bbfa62b6c7c379f1272b0b199d754d8e

kernel32

user32

advapi32

ole32

oleaut32

setupapi

comctl32

generic