bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc

Sharing

Copy URL Twitter E-mail

General

Target
bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc
Size 224KB
Sample240517-aa4twsff6y
SHA256 bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc
MD5 300ec4cb5fb7349183bf02c31bc67df3
SHA1 6e42195f6cc83e15f2bc23e3c10acf43b2cca695
SHA512 e14bd68a87577763ebe4bd9b45cc1df5e90f4c134e5c031f0236b34cff35c72ae33c83ecc0865a340ec08ca9c5f767f0dc27c270829edd82b40f9e5c94d7488d
SSDEEP 3072:yCoM+wvHbJKfpnxdRV+qBvExEN/G8S8vjM1J3aKV7ZKx:KwPkddVQxMe8S8vj6an
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc

File Explorer

bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc

.exe 224KB

bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc

IMPHASH 9d021f75b7ec8952bd02896017625c40
SHA256 bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc
MD5 300ec4cb5fb7349183bf02c31bc67df3
SHA1 6e42195f6cc83e15f2bc23e3c10acf43b2cca695
SHA512 e14bd68a87577763ebe4bd9b45cc1df5e90f4c134e5c031f0236b34cff35c72ae33c83ecc0865a340ec08ca9c5f767f0dc27c270829edd82b40f9e5c94d7488d
SSDEEP 3072:yCoM+wvHbJKfpnxdRV+qBvExEN/G8S8vjM1J3aKV7ZKx:KwPkddVQxMe8S8vj6an
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW LoadLibraryExW LockFile GetTickCount EnumTimeFormatsW TzSpecificLocalTimeToSystemTime GetVolumeInformationA GlobalFindAtomA LoadLibraryW ReadConsoleInputA GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW GetTempPathW InterlockedExchange GetLastError SetLastError SetFilePointer BackupWrite RemoveDirectoryA BuildCommDCBW LoadModule LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc CreateHardLinkW GetNumberFormatW AddAtomW CreateEventW VirtualProtect PurgeComm GetWindowsDirectoryW CloseHandle CreateFileW GetProcAddress GetComputerNameA GetStringTypeW OutputDebugStringW FlushFileBuffers GetConsoleCP IsProcessorFeaturePresent EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection HeapFree SetFilePointerEx GetConsoleMode ReadConsoleW GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle SetEndOfFile

user32

SetCaretPos

gdi32

GetCharABCWidthsI

ole32

CoMarshalHresult

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

bf5a4198df4893e6c4f7c59876a06d7feaaf897b2060dc22357aa1d59468ccfc

kernel32

user32

gdi32

ole32

msimg32

generic