bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab

General

Target
bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab
Size 525KB
Sample240509-dnjyesfc2x
SHA256 bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab
MD5 3bda0c3bb42be2061b315d7194a6674f
SHA1 94b2412fcf5040bd87c6789a0fcab5ed21614414
SHA512 50f894b342a6af471b43018e40dde52a2e5b489b91b31a8de12fb9bb6308b89ea99955cde1f49f60cee153e0cccec9ea87abd2325837ca071ec38bc80b41a511
SSDEEP 12288:xXKtY1BpGPGCJncpmjMDb1/T2unYdrnNjfjgB:xBpXD5/T2unYdZjjgB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab

File Explorer

bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab

.exe 525KB

bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab

IMPHASH 02869524aedd303a37883c9f742db589
SHA256 bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab
MD5 3bda0c3bb42be2061b315d7194a6674f
SHA1 94b2412fcf5040bd87c6789a0fcab5ed21614414
SHA512 50f894b342a6af471b43018e40dde52a2e5b489b91b31a8de12fb9bb6308b89ea99955cde1f49f60cee153e0cccec9ea87abd2325837ca071ec38bc80b41a511
SSDEEP 12288:xXKtY1BpGPGCJncpmjMDb1/T2unYdrnNjfjgB:xBpXD5/T2unYdZjjgB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer GetConsoleAliasA InterlockedDecrement SetComputerNameW SetCommBreak LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA SetCommState GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetTempPathW InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA BuildCommDCBW LoadLibraryA LocalAlloc CreateHardLinkW SetConsoleOutputCP CreateEventW AddAtomA LoadLibraryExA VirtualProtect SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW OutputDebugStringW HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap HeapSize GetConsoleMode ReadConsoleW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree WriteFile GetModuleFileNameW LoadLibraryExW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW GetConsoleCP HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers SetEndOfFile

user32

GetCaretBlinkTime SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

bfa9989a95f6a528dc858df97987bf86c2c4a8f09ac3b99f77042c924969ceab

kernel32

user32

generic