bf3b0d7795d7e15ed6d340476c2d0424

Sharing

Copy URL Twitter E-mail

General

Target
bf3b0d7795d7e15ed6d340476c2d0424
Size 29KB
Sample240310-3d2g6aec61
SHA256 81ed4111a9a5c77c2da56bca16f026b4e80f48afec6bb6825039543d56e6d405
MD5 bf3b0d7795d7e15ed6d340476c2d0424
SHA1 32d19bf8588f56738d493e8f8568d4992c4f881f
SHA512 af1d932c22e2f3a9b8274e277f29cc8abe7165d48226af1a093e6f0a239637ff809e833468a3f6d9fb75333a7e65e4ba7c7e32fc1eb7439f8464fabbf879101a
SSDEEP 384:CWQnGHPxZB4yKthRh2FijIpEPEmi1qpzzGeKTtkQbymStfyNuz5Wg7Ca8X5Xf:HQe3KtXk1+JhEucXKaNuzTON5Xf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3b0d7795d7e15ed6d340476c2d0424

File Explorer

bf3b0d7795d7e15ed6d340476c2d0424

.dll 29KB

bf3b0d7795d7e15ed6d340476c2d0424

IMPHASH c190d2f8355b12ee15cc1b3f800688fd
SHA256 81ed4111a9a5c77c2da56bca16f026b4e80f48afec6bb6825039543d56e6d405
MD5 bf3b0d7795d7e15ed6d340476c2d0424
SHA1 32d19bf8588f56738d493e8f8568d4992c4f881f
SHA512 af1d932c22e2f3a9b8274e277f29cc8abe7165d48226af1a093e6f0a239637ff809e833468a3f6d9fb75333a7e65e4ba7c7e32fc1eb7439f8464fabbf879101a
SSDEEP 384:CWQnGHPxZB4yKthRh2FijIpEPEmi1qpzzGeKTtkQbymStfyNuz5Wg7Ca8X5Xf:HQe3KtXk1+JhEucXKaNuzTON5Xf
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5428

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateFileA DeleteCriticalSection DeleteFileA EnterCriticalSection GetFileSize GetFileType GetProcAddress InitializeCriticalSection LeaveCriticalSection LoadLibraryA OpenMutexA OpenProcess ReadFile ResumeThread SetEndOfFile SetFilePointer Sleep TerminateThread UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect WaitForSingleObject WinExec WriteFile

user32

BeginPaint CheckMenuRadioItem CheckRadioButton CreateMenu CreateWindowExA DestroyCursor DestroyWindow EndPaint ExitWindowsEx GetWindowDC SetSysColors SetTimer SetWindowLongA SetWindowPos ShowWindow SystemParametersInfoA TranslateMessage UpdateWindow ValidateRect WaitMessage wvsprintfA

gdi32

CombineRgn CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateRectRgn CreateSolidBrush DeleteDC DeleteObject MoveToEx Rectangle RestoreDC SaveDC SelectObject SetBkColor SetBkMode SetBrushOrgEx SetPixel SetStretchBltMode SetTextColor SetWindowOrgEx StretchBlt TextOutA

shell32

DragQueryPoint

comdlg32

ChooseColorA ChooseFontA

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

Name

.code

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CODE

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

Name

.bss

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CRT

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

6KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

bf3b0d7795d7e15ed6d340476c2d0424

kernel32

user32

gdi32

shell32

comdlg32

generic