bfbde332f0679a1f4070dd3a01e3dffb

Sharing

Copy URL

Twitter E-mail

General

Target

bfbde332f0679a1f4070dd3a01e3dffb
Size

177KB
MD5

bfbde332f0679a1f4070dd3a01e3dffb
SHA1

e99e779cca73c9f3c7b63bbddf295f1cc6132254
SHA256

3dbe509a4d072cdf0a938b3f0697e963870f9eadbdee8954a81397a6b86d1347
SHA512

ec114f4f792dfe261c7dd7088e7ba884520ad9bf1f622d729c2f3fce5ed17dd5715b6fe4b039f42c86c64b437d1f88219beaf833e2f54d68146416a285e514c5
SSDEEP

3072:WS/RcHSA5exxnFnXyHHwdDU4Xhe3dQ5mot5AUzGJJTKRdZJINngpMkUz361:WS2y/xjiA4mAObt5AUa1NAUDi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfbde332f0679a1f4070dd3a01e3dffb

Files

bfbde332f0679a1f4070dd3a01e3dffb
.exe windows:4 windows x86 arch:x86

00ba1a65e6efa215b36f34e8e066e92e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
GetThreadPriorityBoost
GetDllDirectoryA
GetVolumePathNameA
FindNextVolumeMountPointA
VirtualAllocEx
GetConsoleTitleA
GetPriorityClass
CreateSemaphoreA
SetComputerNameExW
SetFilePointer
GetFullPathNameA
BuildCommDCBAndTimeoutsA
GetConsoleWindow
GetPrivateProfileStructA
GetModuleHandleA
MultiByteToWideChar
CancelTimerQueueTimer
SystemTimeToFileTime
VirtualQueryEx
GetProcessIoCounters
OpenWaitableTimerA
GetModuleHandleA
WriteFileEx
DuplicateConsoleHandle
DeleteTimerQueueEx
SetupComm
SetPriorityClass
SetConsoleTextAttribute
CallNamedPipeA
GetConsoleScreenBufferInfo
QueryInformationJobObject
SetCommTimeouts
LocalFlags
HeapLock
OpenSemaphoreA
TlsAlloc
lstrcmpA
IsBadStringPtrA
LZOpenFileA
GetSystemWindowsDirectoryA
ReadConsoleA
TlsFree
GlobalAddAtomA

user32

EnumDisplaySettingsExA
RedrawWindow
GetMessageTime
EnumDisplayMonitors
GetWindowInfo
GetThreadDesktop
GetThreadDesktop
DlgDirListComboBoxA
SendNotifyMessageA
GetScrollPos
CreateSystemThreads
LoadIconA
ChildWindowFromPoint
RegisterClipboardFormatA
RealGetWindowClassA
GetSystemMetrics
GetClipboardOwner
CreateMenu
GetMessageExtraInfo
GetSubMenu
DragObject
UnpackDDElParam
SetFocus
GetPriorityClipboardFormat
SystemParametersInfoA
GetThreadDesktop
ReplyMessage
EnumPropsExW
GetMenuItemInfoA
SendMessageTimeoutA
SetMessageQueue
UnlockWindowStation
SendMessageTimeoutW
GetWindow
GetMessageTime
CopyIcon
GetAltTabInfoA
CreateIconFromResourceEx
PostThreadMessageA

hid

HidD_FlushQueue
HidD_SetNumInputBuffers

dsound

DirectSoundCreate

Exports

Exports

InitTvubovowdcg
Vjwprnjq
Qvjjpbox
CreateFhmjoaafpfd
Nutxuxikn
Kgppnerqe
ReadGjaxtrtystl
WriteWlkyfpc
Xuqwihvt
CloseYmfoktf
SetKnqmwidx
BeginHekljeyjxgq
ReadOqhtpff
AddHawcoikln
Fcwakbmfdwi
OpenTskjonbjuf
Gwldinycqbt
Usjxypwwqwg
CloseJxjypvkwttp
Quspybnhm
Unboneqinlk
Breelklh
Ujffrhvs
Bbpaeoryv
Ximaihjpus
Eyeixamy
Oycnsgplv
Dsdgdpiurym
ReadNupomhffyu
SetNmbysssdeh
Lbcjcvh
InitOmvwwhwelwa

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00ba1a65e6efa215b36f34e8e066e92e

Headers

File Characteristics

Imports

kernel32

user32

hid

dsound

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 2KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 58KB - Virtual size: 57KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 2KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 58KB - Virtual size: 57KB

.reloc
Size: 3KB - Virtual size: 2KB