bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36

Sharing

Copy URL Twitter E-mail

General

Target
bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36
Size 4.1MB
Sample240516-e2hsysbh5y
SHA256 bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36
MD5 393ae5f8768a1ee7c0be487ed7de4b91
SHA1 f1ff2e591b450b20f62469767215527fdab4bce7
SHA512 3c32ee01456b6d6ad8bc29f68113077d429aec93c37f6e1e99e80bd013358713535ed6d24bfc00084c12bb2dc4762be9cfda7fbf87dcf738a8543ada453faec1
SSDEEP 98304:Z96GAmuNBigEkoqfZTwC6uGlBZNljS4jcC:ZI9hoq9wC6uGlB/xgC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36

.exe 4.1MB

bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36

IMPHASH bc86afce8c6ffcf0e1f3e468288b5ddf
SHA256 bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36
MD5 393ae5f8768a1ee7c0be487ed7de4b91
SHA1 f1ff2e591b450b20f62469767215527fdab4bce7
SHA512 3c32ee01456b6d6ad8bc29f68113077d429aec93c37f6e1e99e80bd013358713535ed6d24bfc00084c12bb2dc4762be9cfda7fbf87dcf738a8543ada453faec1
SSDEEP 98304:Z96GAmuNBigEkoqfZTwC6uGlBZNljS4jcC:ZI9hoq9wC6uGlB/xgC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

d7:8f:3c:35:ef:8f:92:08:b5:26:fc:78:59:ae:6d:6f:ca:18:04:e0:3d:24:30:d0:11:50:67:76:3b:c3:53:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10820,ST=0b1c1115005f5c4e140f090709110417101e115b0c1704+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

Chains

May 15, 2024

Minor OS version

Major OS version

Entry point

16403

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SystemTimeToTzSpecificLocalTime LoadLibraryExW GetConsoleAliasA GetTickCount GetSystemDirectoryW GetVolumeInformationA WriteConsoleW SetComputerNameExW GetLastError SetLastError GetProcAddress RemoveDirectoryA IsBadStringPtrW OpenMutexA WriteConsoleA LocalAlloc GetNumberFormatW CreateEventW GlobalGetAtomNameW GetModuleFileNameA BuildCommDCBA VirtualProtect PurgeComm GetWindowsDirectoryW CloseHandle CreateFileW GetStringTypeW LoadLibraryA GetComputerNameA OutputDebugStringW FlushFileBuffers GetConsoleCP IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection ReadFile GetConsoleMode ReadConsoleW HeapFree GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc SetStdHandle LCMapStringW SetEndOfFile

user32

GetMenuItemID SetCaretPos

gdi32

GetCharWidthI

ole32

CoMarshalHresult

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

bcb9e13132021147e43c99bca20197ce0632459fa45b2e1d144dcb6880e69d36

PE Signature issue

kernel32

user32

gdi32

ole32

msimg32

generic