bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4

Sharing

Copy URL Twitter E-mail

General

Target
bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4
Size 493KB
Sample240612-eetlyazgjf
SHA256 bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4
MD5 42fe53a85dd76b4f1be86aa8f9caf298
SHA1 31a30c847cc5ae20f840678c7003f12a0e0768f2
SHA512 66967d656310cb5e7e61fa8e7e16e6c1d0889ac8d8b8064d21e49eb204512190cc56c18443ad7150e30cb69ead78fdcf999703ab2ac013b956853a9f2fd127c3
SSDEEP 6144:eRsELoqy5gaH1agGPKuFvLEzTkZ+pglMAUTNY090QnR4lAUkYfYda5CE5SadN3TU:eXL/y6aH78Q8eglA2lhfYdq5BRdBMR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4

File Explorer

bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4

.dll 493KB

bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4

IMPHASH 1b5617b870e9323f63feee9d2e7baf65
SHA256 bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4
MD5 42fe53a85dd76b4f1be86aa8f9caf298
SHA1 31a30c847cc5ae20f840678c7003f12a0e0768f2
SHA512 66967d656310cb5e7e61fa8e7e16e6c1d0889ac8d8b8064d21e49eb204512190cc56c18443ad7150e30cb69ead78fdcf999703ab2ac013b956853a9f2fd127c3
SSDEEP 6144:eRsELoqy5gaH1agGPKuFvLEzTkZ+pglMAUTNY090QnR4lAUkYfYda5CE5SadN3TU:eXL/y6aH78Q8eglA2lhfYdq5BRdBMR
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

114640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

H:\WorkshopAgent\DevelopProj2\Prerelease\SaveAsFileCheck\Bin\Unicode_Release\SaveAsFileCheck64.pdb

kernel32

SuspendThread TerminateThread ResumeThread SetThreadPriority GetExitCodeThread LoadLibraryW GetProcAddress GetCurrentThreadId GetTickCount GetModuleFileNameW WideCharToMultiByte MultiByteToWideChar lstrlenA LoadResource FindResourceExW lstrlenW GetModuleHandleW GetVersionExW LocalFree FormatMessageA GetACP FormatMessageW CloseHandle WaitForSingleObject InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep SleepEx CreateSemaphoreW ReleaseSemaphore CreateMutexW ReleaseMutex CreateEventW SetEvent PulseEvent ResetEvent WaitForMultipleObjects GetCurrentProcessId WriteFile SetFilePointer FreeConsole WriteConsoleW GetStdHandle AllocConsole CreateFileW GetLocalTime RtlLookupFunctionEntry RtlUnwindEx EncodePointer DecodePointer FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext TerminateProcess GetCurrentProcess GetFileAttributesW FlsFree SetLastError GetCurrentThread FlsAlloc HeapFree GetCPInfo GetOEMCP IsValidCodePage HeapAlloc HeapSize ExitProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation GetVersion HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringW GetStringTypeW GetLocaleInfoW GetConsoleCP GetConsoleMode FatalAppExitA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary SetStdHandle FlushFileBuffers GetCurrentDirectoryA GetCurrentDirectoryW GetSystemDirectoryA GetSystemDirectoryW CreateFileA SetFileAttributesA GetFileAttributesA DeleteFileA SetFileAttributesW DeleteFileW MoveFileA MoveFileW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW CreateDirectoryA CreateDirectoryW RemoveDirectoryA RemoveDirectoryW MoveFileExW CopyFileW MoveFileExA CopyFileA GetTempPathA GetTempPathW GetEnvironmentVariableA GetEnvironmentVariableW ExpandEnvironmentStringsA ExpandEnvironmentStringsW LoadLibraryA GetFileInformationByHandle GetSystemInfo lstrcmpA LocalAlloc GetDriveTypeW GetLogicalDrives GetVolumeInformationW ReadFile SetVolumeLabelW GetDiskFreeSpaceExW QueryDosDeviceW DefineDosDeviceW GetDriveTypeA QueryDosDeviceA GetLastError FlsGetValue OutputDebugStringW CreateThread

user32

IsWindow GetWindowTextW InternalGetWindowText MsgWaitForMultipleObjects MessageBoxW GetClassNameW EnumChildWindows GetSystemMetrics GetForegroundWindow GetTopWindow FindWindowExW GetWindowThreadProcessId

ole32

CoInitialize

oleaut32

VariantInit SysFreeString SysStringLen

shlwapi

StrRChrIW StrStrIW

oleacc

AccessibleObjectFromWindow

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

advapi32

RegConnectRegistryW RegCreateKeyExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegQueryValueExA RegSetValueExW RegDeleteKeyW RegEnumKeyW RegQueryInfoKeyW RegDeleteValueW RegSetValueExA RegEnumValueW RegOpenKeyW OpenSCManagerW OpenServiceW CloseServiceHandle QueryServiceStatus RegOpenKeyA RegCreateKeyExA RegCreateKeyA RegCreateKeyW

Sharing

General

Malware Config

Signatures

File Explorer

bda9b32a4bcd031ae927333f5e6e3e4be0dbdfe639d84535ad72505e2eebadd4

kernel32

user32

ole32

oleaut32

shlwapi

oleacc

version

advapi32

generic