bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a

General

Target
bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a
Size 1.3MB
Sample240407-yp4pfadd68
SHA256 bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a
MD5 51f2c3afee4b3132faad1d4c79c65bd2
SHA1 657625a195862a295cbdbfcdf1dc1bcfa55f14d6
SHA512 5ddff8d37c5057b3eca5bdad4ba6de6564e9cf9d83f47e608f5c387f91ba2da353db772230997d17741d97325bbc23f73ec060994164d44e3044629b9b521317
SSDEEP 12288:H09B+VdMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:H09BlSkQ/7Gb8NLEbeZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a

File Explorer

bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a

.exe 1.3MB

bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a

IMPHASH 7df1816239c5bc855600d41210406c5b
SHA256 bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a
MD5 51f2c3afee4b3132faad1d4c79c65bd2
SHA1 657625a195862a295cbdbfcdf1dc1bcfa55f14d6
SHA512 5ddff8d37c5057b3eca5bdad4ba6de6564e9cf9d83f47e608f5c387f91ba2da353db772230997d17741d97325bbc23f73ec060994164d44e3044629b9b521317
SSDEEP 12288:H09B+VdMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:H09BlSkQ/7Gb8NLEbeZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GoogleUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW SetStdHandle CloseHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

bc16b0ca89acc5c553279d7454e120f7ad416a28dc3955c853aa9d7a8e3df41a

advapi32

kernel32

shell32

user32

shlwapi

generic