da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4

General

Target
da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4
Size 280KB
Sample240315-bmw59afa47
SHA256 da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4
MD5 7636e1d5452215fd7610d30b26b0748b
SHA1 e6fce12a40953d084e115752439ec6b980b041b8
SHA512 379d2273d3c2f14bdfe3a50b3cf37dcaf73316a9f4f109a416ee1cc56d2e3852b7753038f8cc038a52584ffa1449609554f431a7d4caa41069935cb7d4ddf59f
SSDEEP 3072:e+rpPXqX+WJ1O368k41MphlmfTwoRsgDgu0zxA+iV9wzq3oR:eoqXzXh1pswQEf2r4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4

File Explorer

da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4

.exe 280KB

da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4

IMPHASH 178336cf4648f18755f42b11fa112e64
SHA256 da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4
MD5 7636e1d5452215fd7610d30b26b0748b
SHA1 e6fce12a40953d084e115752439ec6b980b041b8
SHA512 379d2273d3c2f14bdfe3a50b3cf37dcaf73316a9f4f109a416ee1cc56d2e3852b7753038f8cc038a52584ffa1449609554f431a7d4caa41069935cb7d4ddf59f
SSDEEP 3072:e+rpPXqX+WJ1O368k41MphlmfTwoRsgDgu0zxA+iV9wzq3oR:eoqXzXh1pswQEf2r4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

46128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GlobalAlloc GetCurrentProcessId GetExitCodeThread GetLastError GetHandleInformation GetTickCount LoadLibraryA LoadLibraryW GetModuleFileNameA GetModuleHandleA SetEnvironmentVariableA FindResourceW GlobalFindAtomA GetWindowsDirectoryW GetCurrentDirectoryA CreateDirectoryA RemoveDirectoryW QueryDosDeviceW CreateFileA GetFileAttributesExA GetVolumeInformationW GetVersionExA FindNextVolumeMountPointA GetLocaleInfoA GetLocaleInfoW GetNumberFormatW EnumTimeFormatsA PeekConsoleInputW FreeConsole ReadConsoleA WriteConsoleW AddConsoleAliasA GetConsoleAliasExesLengthW CreateFileW SetFilePointerEx SetStdHandle GetStringTypeW OutputDebugStringW HeapReAlloc EncodePointer DecodePointer ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapAlloc RaiseException RtlUnwind GetCommandLineA IsProcessorFeaturePresent HeapFree HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetProcessHeap FlushFileBuffers GetConsoleCP GetConsoleMode GetFileType GetCurrentThreadId QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW CloseHandle

user32

CharLowerA CharUpperBuffW GetClassInfoW ActivateKeyboardLayout

winhttp

WinHttpOpen

Name

.text

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

151KB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xema

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vet

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hed

Size

1024B

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

da829e9e36bd8e7558a5f1f290da0aa49fa4db599d697d45ef89aefe1b1bddb4

kernel32

user32

winhttp

generic