bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4

General

Target
bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4
Size 742KB
Sample240519-cbx4vacd81
SHA256 bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4
MD5 bf6722bd91c545da1ed77e25ae076a30
SHA1 e9c8f9b439149efea23b7a203d319174dc96358f
SHA512 44e3db45169aecb1346fc952227463b585bf29010f257412d0cc3813e29883ceb6c6efdcc8fd391316a34aa5efca8068f7656ef25cc317835f5bc9bbbfd653f3
SSDEEP 12288:eX67Zh1zfyEf6fZCY7fCTqvNTB2/Gr+LukP0g3mBXGiY5bITltVC:eX6DlV0KI+6CX3mBWL5OV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4

File Explorer

bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4

.exe 742KB

bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4

IMPHASH 0b2c4d8551cd34263204e77032e85b2b
SHA256 bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4
MD5 bf6722bd91c545da1ed77e25ae076a30
SHA1 e9c8f9b439149efea23b7a203d319174dc96358f
SHA512 44e3db45169aecb1346fc952227463b585bf29010f257412d0cc3813e29883ceb6c6efdcc8fd391316a34aa5efca8068f7656ef25cc317835f5bc9bbbfd653f3
SSDEEP 12288:eX67Zh1zfyEf6fZCY7fCTqvNTB2/Gr+LukP0g3mBXGiY5bITltVC:eX6DlV0KI+6CX3mBWL5OV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA CommConfigDialogA InterlockedIncrement SetDefaultCommConfigW SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer SetCommBreak GetModuleHandleW GetTickCount GetProcessHeap GetSystemTimes GetPriorityClass GlobalAlloc Sleep GetFileAttributesA lstrcpynW CompareStringW SetConsoleTitleA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA LoadLibraryA WriteConsoleA SetCurrentDirectoryW VirtualLock GlobalGetAtomNameW OpenJobObjectW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA SetCalendarInfoA GetSystemTime AreFileApisANSI GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile HeapSize CreateFileA CloseHandle

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

bbfe2d970da078468d9703a1d34688f05da30227033a23445654156f6dc052e4

kernel32

user32

generic