bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08

General

Target
bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08
Size 440KB
Sample240612-e5majs1cln
SHA256 bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08
MD5 7319bd2bca1e88ee569d64f58f9cf2f4
SHA1 d3438429c59542a38b452e322633129258e16ab7
SHA512 e99c6cc865418641576e93b30ea81e1cb5090be3979c1a291906a46c8d81cf5fa1aae338c35eb4b364441f7c4c3a49fb5cf9ac278468dcc05ef303fffe8adbf7
SSDEEP 6144:pvLgJ4m/1/o6WliA7wA4XzAFI7uDuVQ2ON:98im/i4XZCA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08

File Explorer

bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08

.exe 440KB

bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08

IMPHASH f30043550c99434098d46e1ad07c0590
SHA256 bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08
MD5 7319bd2bca1e88ee569d64f58f9cf2f4
SHA1 d3438429c59542a38b452e322633129258e16ab7
SHA512 e99c6cc865418641576e93b30ea81e1cb5090be3979c1a291906a46c8d81cf5fa1aae338c35eb4b364441f7c4c3a49fb5cf9ac278468dcc05ef303fffe8adbf7
SSDEEP 6144:pvLgJ4m/1/o6WliA7wA4XzAFI7uDuVQ2ON:98im/i4XZCA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA GetConsoleAliasesLengthW GetLocaleInfoA InterlockedIncrement SetDefaultCommConfigW CreateJobObjectW SetVolumeMountPointW GetTimeFormatA SetCommBreak GetModuleHandleW GetTickCount GetConsoleAliasesA GetConsoleAliasesLengthA FormatMessageA ReadConsoleOutputA LoadLibraryW GetStringTypeExW lstrcpynW FindNextVolumeW FileTimeToSystemTime SetConsoleTitleA GetStringTypeExA CreateJobObjectA GetNamedPipeHandleStateW SetLastError GetThreadLocale GetProcAddress SetVolumeLabelW LoadLibraryA WriteConsoleA UnhandledExceptionFilter RegisterWaitForSingleObject LocalAlloc SetCalendarInfoW SetFileApisToANSI FindAtomA GetModuleFileNameA lstrcatW OpenFileMappingW BuildCommDCBA GlobalAddAtomW EnumCalendarInfoExA GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA GetModuleHandleA

user32

LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

bf042cdd9bb587b6e20d2ae2710f0c04c547c069cf0e9373d395899928de3b08

kernel32

user32

generic