bdfe6af2e19ba676ab00ae66f7160b2a

Sharing

Copy URL

Twitter E-mail

General

Target

bdfe6af2e19ba676ab00ae66f7160b2a
Size

462KB
MD5

bdfe6af2e19ba676ab00ae66f7160b2a
SHA1

e02d51bc5513c6e979d802f04a12d3b30c612c2c
SHA256

cf3b92c156ec409540f84412c8beb7381c413267f56e5e59640bf10578ab35da
SHA512

5da18dbd855da15ac8f17df88f4d01a6d2ac04de335706e54d4d963763ea1e4432989986fb81d85fa149ede4dd806b3a3870b8f604bf4e02356662788b7b6330
SSDEEP

12288:mSHCtZPaevXLz+/RgR2s+oSzH4rISiHyw1q8WQMI8Uc/RGtU2XTK:5OZPaYd2s+7ywB5MI8p/IX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdfe6af2e19ba676ab00ae66f7160b2a

Files

bdfe6af2e19ba676ab00ae66f7160b2a
.exe windows:4 windows x86 arch:x86

cba9e56fdad362f7ff2ced1ef17f37bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetMailslotInfo
GetFileType
MoveFileW
InitializeCriticalSection
GetCommandLineA
HeapCreate
HeapAlloc
SetLastError
IsValidLocale
GetUserDefaultLCID
LeaveCriticalSection
VirtualFree
GlobalUnfix
ReadConsoleOutputW
UnhandledExceptionFilter
IsValidCodePage
TlsFree
GetDateFormatA
GetEnvironmentStrings
SuspendThread
InterlockedDecrement
DeleteCriticalSection
GetEnvironmentStringsW
EnterCriticalSection
SetConsoleCursorPosition
GetLocaleInfoW
LCMapStringW
GetCurrentThread
GetProcAddress
MoveFileExW
GetCommandLineW
SetEnvironmentVariableA
GetSystemInfo
CompareStringW
SetLocalTime
GetModuleFileNameW
VirtualQuery
GetTimeZoneInformation
SetConsoleCtrlHandler
HeapDestroy
OpenMutexA
GetProcessHeap
LCMapStringA
GetCPInfo
HeapReAlloc
GetTimeFormatA
ExitProcess
GetModuleHandleW
WriteFile
VirtualAlloc
SetHandleCount
QueryPerformanceCounter
GetCurrentProcess
GetStdHandle
GetModuleHandleA
FreeEnvironmentStringsW
GetStartupInfoA
GetStartupInfoW
GetCurrentThreadId
HeapSize
Sleep
CompareStringA
FreeLibrary
GetCurrentProcessId
TlsSetValue
GetStringTypeA
FindNextChangeNotification
GetTempFileNameA
GetTickCount
GetLocaleInfoA
ReadFile
FreeEnvironmentStringsA
InterlockedIncrement
GetVersionExA
RtlUnwind
EnumSystemLocalesA
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeW
TlsGetValue
CreateWaitableTimerA
GetACP
TlsAlloc
GetLastError
GetOEMCP
HeapFree
TerminateProcess
LoadLibraryA
DosDateTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GlobalDeleteAtom
GetModuleFileNameA
IsDebuggerPresent
lstrcpyA
SetUnhandledExceptionFilter
CreateProcessW

advapi32

CryptSetProvParam
RegReplaceKeyW
CryptSetKeyParam
CryptDestroyHash
LookupPrivilegeValueW
RegEnumKeyExA
CryptVerifySignatureA
RegDeleteValueW
LookupAccountNameW
LookupSecurityDescriptorPartsA
CryptSetProviderExW
LookupSecurityDescriptorPartsW
AbortSystemShutdownW
LookupAccountSidA
GetUserNameW
InitializeSecurityDescriptor
CryptGetKeyParam
CryptDestroyKey
CryptGetHashParam
LookupAccountNameA
RegQueryValueW
CryptEnumProviderTypesA
CryptReleaseContext
RegQueryMultipleValuesW

gdi32

SetWindowExtEx
CloseEnhMetaFile
ScaleViewportExtEx
PaintRgn
GetBkMode
CreateColorSpaceA
GetDIBits
LineDDA
GetGlyphOutlineA
SetMapMode
GetCurrentPositionEx
EnumObjects
PtInRegion
MaskBlt
GetWinMetaFileBits
SaveDC
GetCharacterPlacementW
GetTextFaceW
GetTextFaceA

wininet

FindFirstUrlCacheEntryExA
ShowSecurityInfo
ShowCertificate
ShowClientAuthCerts
SetUrlCacheGroupAttributeA
InternetConfirmZoneCrossingA
InternetCreateUrlA
RetrieveUrlCacheEntryFileW
HttpSendRequestExA
InternetShowSecurityInfoByURL
UnlockUrlCacheEntryFile
InternetGoOnlineW
InternetLockRequestFile
InternetCloseHandle
FtpCommandW
FtpDeleteFileW
InternetGetCookieW
UnlockUrlCacheEntryStream
FtpRemoveDirectoryW
SetUrlCacheEntryInfoW

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cba9e56fdad362f7ff2ced1ef17f37bc

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

wininet

Sections

.text Size: 168KB - Virtual size: 167KB

.data Size: 278KB - Virtual size: 277KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 168KB - Virtual size: 167KB

.data
Size: 278KB - Virtual size: 277KB

.rsrc
Size: 15KB - Virtual size: 14KB