bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f

General

Target
bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f
Size 406KB
Sample240426-fxb1aaac69
SHA256 bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f
MD5 8ed65694a3555b7240eddd1628777d4c
SHA1 e3d8a2c210aaa5370c7fa7fa086ac6f5b1150765
SHA512 eedce00d4b8e5586519b4a205406ca3c7479a343776581b1438dc5ae2347c4741739daf8568501951d91373125d9f181964a0d9ed1cfa91c6dcfb4ec4e95aca5
SSDEEP 12288:vnCNuxzdlcGaoloHcJu4ysZCRzh8nkIry:vCGdleCCgCRCnkIry
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f

File Explorer

bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f

.exe 406KB

bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f

IMPHASH 35d2f187a446fa7dcfd6bfdfd63133ca
SHA256 bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f
MD5 8ed65694a3555b7240eddd1628777d4c
SHA1 e3d8a2c210aaa5370c7fa7fa086ac6f5b1150765
SHA512 eedce00d4b8e5586519b4a205406ca3c7479a343776581b1438dc5ae2347c4741739daf8568501951d91373125d9f181964a0d9ed1cfa91c6dcfb4ec4e95aca5
SSDEEP 12288:vnCNuxzdlcGaoloHcJu4ysZCRzh8nkIry:vCGdleCCgCRCnkIry
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cigohu\sekucewirukafu-gemecom-wunepehen.pdb

kernel32

GlobalMemoryStatus GetLocaleInfoA FindResourceExW LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA BuildCommDCBW LoadLibraryA SetCalendarInfoW GetExitCodeThread AddAtomW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsValidCodePage GetACP GetCPInfo GetCurrentThreadId HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LoadLibraryExW OutputDebugStringW LCMapStringW SetStdHandle SetFilePointerEx HeapReAlloc CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

bdc17d6fb9d21c9bb5bcbf4d9ea8a7a9104d820a2f8745ff517c4580b397e18f

kernel32

generic