bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277

Sharing

Copy URL Twitter E-mail

General

Target
bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277
Size 833KB
Sample240612-s2barstglk
SHA256 bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277
MD5 817448187726fbe0f2eaeb7c0679827c
SHA1 5231b7576dfb51662998c326d35bbc1d868885b4
SHA512 3075f9830d99e6a218f23a1b78f6813fc20c7dc33bf0d10bc989b1d7757eacefa6aa6b563426774e3f14f8eca612739781dae7a6053e95a58d0440ad8aee5e8f
SSDEEP 12288:qbqkXJvhJW0x1DBwSaPJzjPtI1R9SIeTyv6MxJ/Y:IJ5Jd1tPiJNeSZ4vn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277

File Explorer

bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277

.exe 833KB

bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277

IMPHASH 50a3b9268144d189d6a21b183a6f8063
SHA256 bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277
MD5 817448187726fbe0f2eaeb7c0679827c
SHA1 5231b7576dfb51662998c326d35bbc1d868885b4
SHA512 3075f9830d99e6a218f23a1b78f6813fc20c7dc33bf0d10bc989b1d7757eacefa6aa6b563426774e3f14f8eca612739781dae7a6053e95a58d0440ad8aee5e8f
SSDEEP 12288:qbqkXJvhJW0x1DBwSaPJzjPtI1R9SIeTyv6MxJ/Y:IJ5Jd1tPiJNeSZ4vn
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13874

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dev\projects\desktoplauncher\win\Release\scopevisiowindowslauncher.pdb

kernel32

GetFileAttributesW FormatMessageW GetLastError CloseHandle LocalFree GetFileSize CreateProcessW GetTempFileNameW ReadConsoleW SetEndOfFile WriteConsoleW SetFilePointerEx HeapReAlloc HeapSize CreateFileW GetConsoleCP FlushFileBuffers GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW WaitForSingleObject GetTempPathW GetModuleFileNameW WriteFile GetCommandLineW ReadFile GetConsoleMode CreateDirectoryW FindFirstFileExW FindClose GetStringTypeW LCMapStringW GetFileType HeapAlloc HeapFree GetACP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle MultiByteToWideChar WideCharToMultiByte ExitProcess DecodePointer

user32

GetClientRect TranslateMessage LoadBitmapW InvalidateRect SetTimer DispatchMessageW ShowWindow GetSystemMetrics PostQuitMessage ReleaseDC BeginPaint EndPaint RegisterClassW CreateWindowExW GetMessageW DefWindowProcW PostMessageW GetDC MessageBoxW FillRect

gdi32

SelectObject CreateCompatibleDC DeleteDC GetObjectW DeleteObject CreateSolidBrush BitBlt

shell32

SHGetFolderPathW SHFileOperationW SHGetSpecialFolderPathW CommandLineToArgvW

winhttp

WinHttpQueryDataAvailable WinHttpConnect WinHttpSetCredentials WinHttpSendRequest WinHttpQueryAuthSchemes WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders WinHttpOpen WinHttpReceiveResponse

Sharing

General

Malware Config

Signatures

File Explorer

bd651d20c1c471eae1bf2cc72be3ec39fe79e7a3ba728b2d277ee7dcaac82277

kernel32

user32

gdi32

shell32

winhttp

generic