bd3030832602591f05fe01ef11feaa3b9fe776b2a184eb454f02cae3ab73340b[.]exe

General

Target
bd3030832602591f05fe01ef11feaa3b9fe776b2a184eb454f02cae3ab73340b.exe
Size 277KB
Sample240725-gfdcfsvcqa
SHA256 bd3030832602591f05fe01ef11feaa3b9fe776b2a184eb454f02cae3ab73340b
MD5 96afbdc888836590660397d78fb793ca
SHA1 6f669e04e399ad136c886f73fa4e572e633170be
SHA512 2eada6c9649475fd676dadf7007bcf6ed91f33a586c173092d47030921f05ee5b5b90815e7fef7090e6dd1f3955813e4a2548d4a731c4837f68d2fc5318eb991
SSDEEP 3072:dAX84a0A1W/SWOsECaHfxG/5V2sdRnb5xio2BDGCH:G84PAoSWOnt/U/W8biDA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3030832602591f05fe01ef11feaa3b9fe776b2a184eb454f02cae3ab73340b.exe

File Explorer

bd3030832602591f05fe01ef11feaa3b9fe776b2a184eb454f02cae3ab73340b.exe

.exe 277KB

bd3030832602591f05fe01ef11feaa3b9fe776b2a184eb454f02cae3ab73340b.exe

IMPHASH a0ac95739c763bb58b1023ed75bb0bb7
SHA256 bd3030832602591f05fe01ef11feaa3b9fe776b2a184eb454f02cae3ab73340b
MD5 96afbdc888836590660397d78fb793ca
SHA1 6f669e04e399ad136c886f73fa4e572e633170be
SHA512 2eada6c9649475fd676dadf7007bcf6ed91f33a586c173092d47030921f05ee5b5b90815e7fef7090e6dd1f3955813e4a2548d4a731c4837f68d2fc5318eb991
SSDEEP 3072:dAX84a0A1W/SWOsECaHfxG/5V2sdRnb5xio2BDGCH:G84PAoSWOnt/U/W8biDA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

462848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\min.pdb

kernel32

FreeEnvironmentStringsA GetConsoleAliasesLengthA ReadConsoleW CreateDirectoryExW GetSystemDirectoryW LoadLibraryW InitializeCriticalSectionAndSpinCount CreateEventA LeaveCriticalSection LocalHandle GetBinaryTypeW CompareStringW lstrlenW ReplaceFileA FreeLibraryAndExitThread SetLastError MapViewOfFile AttachConsole VirtualAlloc SetStdHandle GetAtomNameA WriteConsoleA LocalAlloc SetCalendarInfoW WriteProfileSectionW SetConsoleWindowInfo GetModuleFileNameA GetModuleHandleA FindFirstChangeNotificationA VirtualProtect GetCPInfoExA CloseHandle BindIoCompletionCallback SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetLastError HeapReAlloc HeapAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapSize EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree LoadLibraryA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA

user32

ClientToScreen

Sharing