bd7cb4fbd4ddc0cac6469f5731d50080

Sharing

Copy URL Twitter E-mail

General

Target
bd7cb4fbd4ddc0cac6469f5731d50080
Size 998KB
Sample240310-ddqcfsaf24
SHA256 f958289acb16c6babc79ab43e4a3f5918a687632383ac6efd324dd155fbf4ce4
MD5 bd7cb4fbd4ddc0cac6469f5731d50080
SHA1 ea02460a65b8199491a10a736d4fbb661d702674
SHA512 35959093fec376317cc0d65d00a95300a5c4cbc84a1d4ce8589c0b8f5364965a95287ca1d4d47c7e9734e5ac4f0a80761104c3a94bb77b1f4ed63f067300b822
SSDEEP 24576:jQcu8pzbIPLMzjw09TI/OrRd0E1ORe39JaCHSG9:jxuW0PL4wOxNP2TG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd7cb4fbd4ddc0cac6469f5731d50080

File Explorer

bd7cb4fbd4ddc0cac6469f5731d50080

.dll 998KB

bd7cb4fbd4ddc0cac6469f5731d50080

IMPHASH 855c0855b7b27b4c176078670cc3c6f3
SHA256 f958289acb16c6babc79ab43e4a3f5918a687632383ac6efd324dd155fbf4ce4
MD5 bd7cb4fbd4ddc0cac6469f5731d50080
SHA1 ea02460a65b8199491a10a736d4fbb661d702674
SHA512 35959093fec376317cc0d65d00a95300a5c4cbc84a1d4ce8589c0b8f5364965a95287ca1d4d47c7e9734e5ac4f0a80761104c3a94bb77b1f4ed63f067300b822
SSDEEP 24576:jQcu8pzbIPLMzjw09TI/OrRd0E1ORe39JaCHSG9:jxuW0PL4wOxNP2TG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

825888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

BeginBufferedAnimation BeginBufferedPaint BeginPanningFeedback BufferedPaintClear BufferedPaintInit BufferedPaintRenderAnimation BufferedPaintSetAlpha BufferedPaintStopAllAnimations BufferedPaintUnInit CloseThemeData DrawThemeBackground DrawThemeBackgroundEx DrawThemeEdge DrawThemeIcon DrawThemeParentBackground DrawThemeParentBackgroundEx DrawThemeText DrawThemeTextEx EnableThemeDialogTexture EnableTheming EndBufferedAnimation EndBufferedPaint EndPanningFeedback GetBufferedPaintBits GetBufferedPaintDC GetBufferedPaintTargetDC GetBufferedPaintTargetRect GetCurrentThemeName GetThemeAppProperties GetThemeBackgroundContentRect GetThemeBackgroundExtent GetThemeBackgroundRegion GetThemeBitmap GetThemeBool GetThemeColor GetThemeDocumentationProperty GetThemeEnumValue GetThemeFilename GetThemeFont GetThemeInt GetThemeIntList GetThemeMargins GetThemeMetric GetThemePartSize GetThemePosition GetThemePropertyOrigin GetThemeRect GetThemeStream GetThemeString GetThemeSysBool GetThemeSysColor GetThemeSysColorBrush GetThemeSysFont GetThemeSysInt GetThemeSysSize GetThemeSysString GetThemeTextExtent GetThemeTextMetrics GetThemeTransitionDuration GetWindowTheme HitTestThemeBackground IsAppThemed IsCompositionActive IsThemeActive IsThemeBackgroundPartiallyTransparent IsThemeDialogTextureEnabled IsThemePartDefined OpenThemeData OpenThemeDataEx SetThemeAppProperties SetWindowTheme SetWindowThemeAttribute ThemeInitApiHook UpdatePanningFeedback

Name

.text

Size

804KB

Virtual Size

803KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

324B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

368B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=241, id=145, productName=VS2008 SP1 build 30729, version=30729,

count=416, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=380, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=267, id=221, productName=VS2013 UPD3 build 30723, version=30723,

id=256, productName=VS2015 UPD2 build 23918, version=23918,

count=364, id=131, productName=VS2008 build 21022, version=21022,

count=419, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=123, id=257, productName=VS2015 UPD1 build 23506, version=23506,

count=260, id=203, productName=VS2012 build 50727, version=50727,

count=158, id=123, productName=VS2005 build 50727, version=50727,

count=452, id=203, productName=VS2012 UPD4 build 61030, version=61030,

count=201, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=433, id=202, productName=VS2012 UPD3 build 60610, version=60610,

count=136, id=202, productName=VS2012 UPD3 build 60610, version=60610,

count=121, id=202, productName=VS2012 UPD4 build 61030, version=61030,

bd7cb4fbd4ddc0cac6469f5731d50080

comdlg32

gdi32

advapi32

user32

kernel32

generic