bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56

General

Target
bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56
Size 236KB
Sample240507-pvywpsaf69
SHA256 bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56
MD5 64d298d6e1e0ad45a16aaddd2761625c
SHA1 8c8be9c7ca8bc639f01b3152a1545928b287309b
SHA512 c0e61ccbf8652d52a323035027ceefaa9c91ddda4208ff1a604083629fad2d2da9944353c9eb7fd7c808a1a53c3e5633cdec053e324d2361be116e427a4ff2c8
SSDEEP 1536:nHO7I27liDlr8ZzTPUqoxaqxvFpsu+D3zheWymnHaeF4JvR5+5qzZoCO59AOgW3e:1ocMO031e3kF4J4eyn5RgoYvaiyhLU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56

File Explorer

bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56

.exe 236KB

bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56

IMPHASH 2549df0cae09033b1b45fb49799c2199
SHA256 bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56
MD5 64d298d6e1e0ad45a16aaddd2761625c
SHA1 8c8be9c7ca8bc639f01b3152a1545928b287309b
SHA512 c0e61ccbf8652d52a323035027ceefaa9c91ddda4208ff1a604083629fad2d2da9944353c9eb7fd7c808a1a53c3e5633cdec053e324d2361be116e427a4ff2c8
SSDEEP 1536:nHO7I27liDlr8ZzTPUqoxaqxvFpsu+D3zheWymnHaeF4JvR5+5qzZoCO59AOgW3e:1ocMO031e3kF4J4eyn5RgoYvaiyhLU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW GetCommState SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FindFirstFileExW GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GlobalAlloc LoadLibraryW GetLocaleInfoW lstrcpynW IsBadWritePtr SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA OpenJobObjectW FindAtomA FreeEnvironmentStringsW EnumDateFormatsW GetSystemTime SetFileAttributesW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile HeapSize CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

bc65ae8d3147d68921dde89dd6dcc13cb9c900b5fc5d882508c8e4254aabbf56

kernel32

generic