bcbaec2245e008d98b6b8a15dd780aacf1b3afbe3daf68508f48a5e32e283c1c[.]exe

General

Target
bcbaec2245e008d98b6b8a15dd780aacf1b3afbe3daf68508f48a5e32e283c1c.exe
Size 831KB
Sample240424-b8kpcaea25
SHA256 bcbaec2245e008d98b6b8a15dd780aacf1b3afbe3daf68508f48a5e32e283c1c
MD5 47ff102b3b17c3d0d18efa09e2cee04e
SHA1 1119d011dc1e9eb4e07ad2f460f26787a3a29c14
SHA512 1338bd8496895d5db358f82412e52b91104f35e0ddc07180935237f0166cec56ff798474f3b18a4af2a3924ec9a8932ad900888ed7957d5ebfcde9481eb2ed8b
SSDEEP 12288:iTfc6f4R1506FnTHFEdeRcyg4bmUkxb2vr4f6AYZCQFH7E9:ilf4R06llEdeRlTkgD4f65B7Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcbaec2245e008d98b6b8a15dd780aacf1b3afbe3daf68508f48a5e32e283c1c.exe

File Explorer

bcbaec2245e008d98b6b8a15dd780aacf1b3afbe3daf68508f48a5e32e283c1c.exe

.exe 831KB

bcbaec2245e008d98b6b8a15dd780aacf1b3afbe3daf68508f48a5e32e283c1c.exe

IMPHASH 3aaa1b88fde88b6f18cce2952dfece3e
SHA256 bcbaec2245e008d98b6b8a15dd780aacf1b3afbe3daf68508f48a5e32e283c1c
MD5 47ff102b3b17c3d0d18efa09e2cee04e
SHA1 1119d011dc1e9eb4e07ad2f460f26787a3a29c14
SHA512 1338bd8496895d5db358f82412e52b91104f35e0ddc07180935237f0166cec56ff798474f3b18a4af2a3924ec9a8932ad900888ed7957d5ebfcde9481eb2ed8b
SSDEEP 12288:iTfc6f4R1506FnTHFEdeRcyg4bmUkxb2vr4f6AYZCQFH7E9:ilf4R06llEdeRlTkgD4f65B7Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16223

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vegumizisagezo_curip\liy dapehu.pdb

kernel32

GetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesA GetCompressedFileSizeW EnumTimeFormatsA GetUserDefaultLangID FindResourceExA GetLocaleInfoW MultiByteToWideChar GetTempPathW InterlockedExchange GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress LocalCompact BuildCommDCBW LoadLibraryA WriteConsoleA LocalAlloc GetExitCodeThread AddAtomW RemoveDirectoryW SetNamedPipeHandleState GlobalFindAtomW GetModuleFileNameA GetOEMCP GlobalUnWire FindFirstChangeNotificationA LoadLibraryExA SetCalendarInfoA ReadConsoleInputW GetWindowsDirectoryW GetConsoleProcessList GetVolumeInformationW SetFileAttributesA GetSystemDefaultLangID WriteConsoleW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc ExitProcess GetModuleHandleExW WideCharToMultiByte HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle GetCurrentThreadId GetProcessHeap WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW CreateFileW

advapi32

DeregisterEventSource

winhttp

WinHttpOpen

Sharing