a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8

General

Target
a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8
Size 331KB
Sample240624-bfl2pssbla
SHA256 a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8
MD5 0dcb545a8a4d26ff8a17bba6fdbe6ab9
SHA1 aed4832030de6f1ce42454a66c7d36ae38a608a7
SHA512 ea30b5ef37bd6a447b459289f2e42ddf17ec7e7e5f9117240fd8f015ebbbaf456b1052a801272054e478d3e5bd2db0fb2aa401c8ae9660ecf4a6a79517b33777
SSDEEP 6144:HAYn+Gl3v4yHYuc35+JWl29zBff1XUPvS+3/:gYn+m4y4uc3s9zBffN6r
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8

File Explorer

a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8

.exe 331KB

a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8

IMPHASH c74075b6dc6c1f60861ac931cf6b8f8f
SHA256 a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8
MD5 0dcb545a8a4d26ff8a17bba6fdbe6ab9
SHA1 aed4832030de6f1ce42454a66c7d36ae38a608a7
SHA512 ea30b5ef37bd6a447b459289f2e42ddf17ec7e7e5f9117240fd8f015ebbbaf456b1052a801272054e478d3e5bd2db0fb2aa401c8ae9660ecf4a6a79517b33777
SSDEEP 6144:HAYn+Gl3v4yHYuc35+JWl29zBff1XUPvS+3/:gYn+m4y4uc3s9zBffN6r
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OpenJobObjectA InterlockedCompareExchange GetComputerNameW CreateHardLinkA GetSystemDefaultLCID GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalFindAtomA LoadLibraryW GetConsoleAliasW SetLastError GetProcAddress SetFileAttributesA LoadLibraryA LoadLibraryExW LocalAlloc FindFirstVolumeMountPointW GetDiskFreeSpaceA GlobalHandle EnumResourceTypesW GetOEMCP FindFirstVolumeMountPointA lstrcatW OpenFileMappingW GetWindowsDirectoryW CommConfigDialogW SetStdHandle WriteConsoleW CloseHandle SetFilePointer FlushFileBuffers TlsGetValue FindResourceW IsBadStringPtrW OpenMutexA FindResourceA MultiByteToWideChar GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess GetLastError IsProcessorFeaturePresent HeapAlloc EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree WideCharToMultiByte RtlUnwind LCMapStringW GetStringTypeW HeapSize HeapReAlloc RaiseException GetConsoleCP GetConsoleMode CreateFileW

user32

DdeCmpStringHandles GetCaretPos GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementW

advapi32

BackupEventLogA ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

a78081c497179c524a4903de3688df255b495c01844c03a465398ed6b5129cd8

kernel32

user32

gdi32

advapi32

generic