bcff246f0739ed98f8aa615d256e7e00bc1cb24c8cabaea609b25c3f050c7805[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

bcff246f0739ed98f8aa615d256e7e00bc1cb24c8cabaea609b25c3f050c7805.exe
Size

8.7MB
MD5

71f703024c3d3bfc409f66bb61f971a0
SHA1

f24fc14f39c160b54dc3b2fbd1eba605ec0eb04f
SHA256

bcff246f0739ed98f8aa615d256e7e00bc1cb24c8cabaea609b25c3f050c7805
SHA512

cf33fbaf9ff1b457d39428e96ba0b1ce09f231bc2b396cf01ccd9ba42f6f4d333f0926ac3178da96ce9c550ae47e4404a81b3542ab0044b788318800c9b4b05e
SSDEEP

98304:jBt7GGYoxXJgc80PlTTwqZytmlF8L0pS2E/E1ixewzlbe1dxMsAVuQDjgt/FgvA:jBhxYuJggO220pSj5pKFMsAkQDUTl

Score

1^/10

Malware Config

Signatures

Files

bcff246f0739ed98f8aa615d256e7e00bc1cb24c8cabaea609b25c3f050c7805.exe
.exe windows:6 windows x86 arch:x86

07ec306d8c265e055632800f0622f63c

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:17:b7:3a:15:a4:8a:30:dd:2e:dc:71
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

06/08/2024, 09:26

Not After

07/08/2025, 08:42

Subject

SERIALNUMBER=91440101MA9URAWW0Q,CN=Brave Pragmatic Network Technology Co.\, Ltd.,O=Brave Pragmatic Network Technology Co.\, Ltd.,L=Guangzhou,ST=Guangdong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13094775616e677a686f75,1.3.6.1.4.1.311.60.2.1.2=#13094775616e67646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07/11/2023, 17:13

Not After

09/12/2034, 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

96:18:0c:da:50:d7:94:14:c1:b5:06:47:50:f7:a0:e9:42:ae:82:80:2e:1f:0a:64:d6:de:aa:f3:73:13:c0:9f
Signer

Actual PE Digest

96:18:0c:da:50:d7:94:14:c1:b5:06:47:50:f7:a0:e9:42:ae:82:80:2e:1f:0a:64:d6:de:aa:f3:73:13:c0:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

GetProcessHeap
GetTimeFormatA
GetDateFormatA
SizeofResource
FindResourceA
GetLocaleInfoA
Sleep
LockResource
CloseHandle
CreateThread
FindResourceExW
LoadResource
FindResourceW
GetTickCount
GlobalMemoryStatus
FlushConsoleInputBuffer
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetConsoleCP
DeleteCriticalSection
GetCurrentDirectoryW
GetFullPathNameW
SetConsoleMode
ReadConsoleInputW
WideCharToMultiByte
GetFileSize
CreateFileA
WriteFile
ReadFile
DeleteFileA
WriteConsoleW
SetEndOfFile
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
HeapDestroy
DecodePointer
HeapAlloc
GetACP
IsValidCodePage
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
MulDiv
FindFirstFileExW
ReadConsoleW
FlushFileBuffers
SetConsoleCtrlHandler
SetFilePointerEx
CreateDirectoryA
GetFileAttributesA
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileExA
MultiByteToWideChar
GetCurrentDirectoryA
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetTickCount64
MapViewOfFile
UnmapViewOfFile
FileTimeToDosDateTime
CreateFileMappingA
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
ExitProcess
OpenProcess
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
CopyFileA
CreateFileW
ReleaseMutex
WaitForSingleObject
CreateMutexA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CopyFileW
CompareFileTime
FindFirstFileExA
SetLastError
GetSystemTime
IsDebuggerPresent
OutputDebugStringW
RaiseException
GlobalAlloc
GlobalFree
lstrlenA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx

user32

GetActiveWindow
IsWindowEnabled
GetSystemMetrics
SetActiveWindow
InvalidateRgn
GetWindowTextA
MessageBoxA
WindowFromPoint
GetDesktopWindow
EnumChildWindows
EnumWindows
GetClassNameA
GetWindowThreadProcessId
GetMonitorInfoA
EnumDisplayMonitors
wsprintfA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetDoubleClickTime
SetLayeredWindowAttributes
DialogBoxParamA
GetKeyState
GetKeyNameTextA
MapVirtualKeyA
SetCapture
ReleaseCapture
GetForegroundWindow
SetWindowTextA
AdjustWindowRectEx
MessageBeep
SetCursor
ChildWindowFromPoint
SetClassLongA
FindWindowExA
LoadIconA
DestroyIcon
IsDialogMessageA
MonitorFromRect
MonitorFromWindow
SetProcessDPIAware
IsZoomed
IsRectEmpty
DrawFrameControl
WindowFromDC
GetSysColor
CreateIconIndirect
GetIconInfo
SystemParametersInfoA
GetDC
SetParent
GetWindowDC
DrawFocusRect
SetScrollInfo
IsWindowVisible
TrackPopupMenuEx
InsertMenuItemA
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
SetDlgItemTextW
SendMessageA
GetParent
RedrawWindow
EnableWindow
EndPaint
BeginPaint
InvalidateRect
FillRect
SetForegroundWindow
LoadCursorA
ScreenToClient
AdjustWindowRect
RegisterClassA
DrawIconEx
PostQuitMessage
PtInRect
IsIconic
ReleaseDC
GetCursorPos
LoadImageA
GetWindowRect
GetFocus
DestroyWindow
SetWindowPos
PostMessageA
EndDialog
ShowWindow
GetAsyncKeyState
GetDlgItemTextA
SetTimer
SetWindowLongA
GetDlgCtrlID
CallWindowProcA
MapWindowPoints
GetWindowLongA
DefWindowProcA
CreateWindowExA
SetFocus
BringWindowToTop
SendDlgItemMessageA
SetDlgItemTextA
CreateDialogParamA
GetClientRect
GetDlgItem
KillTimer
DrawTextA
CopyRect
FrameRect
SetRect
GetProcessWindowStation
GetUserObjectInformationW
CreatePopupMenu
OffsetRect

gdi32

GetTextExtentPoint32A
PatBlt
SelectClipRgn
GetDIBits
CreateRectRgnIndirect
BitBlt
GetDeviceCaps
CreateFontA
StretchDIBits
SetBkMode
LineTo
CreatePen
Rectangle
MoveToEx
CreateRectRgn
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetStockObject
GetPixel
DeleteDC
SetTextColor
CreatePalette
SetBkColor
DeleteObject
SetDCBrushColor
SetDCPenColor
PlayEnhMetaFile
SetMapMode
CreateDIBSection
GetObjectA
CombineRgn
SetStretchBltMode
SetDIBits
SetWinMetaFileBits
SetEnhMetaFileBits
ExtTextOutA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
DeleteEnhMetaFile
SelectPalette
RealizePalette
CreateBitmap
Ellipse
Polygon

comdlg32

GetSaveFileNameA
ChooseFontA
CommDlgExtendedError
GetOpenFileNameA
ChooseColorA

shell32

SHFileOperationA
FindExecutableA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHCreateItemFromIDList
ShellExecuteA
Shell_NotifyIconA

wsock32

htons
WSAGetLastError
WSAStartup
gethostbyname
WSASetLastError
socket
shutdown
closesocket
connect
inet_ntoa
recv
select
send

shlwapi

ord176

comctl32

ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
_TrackMouseEvent
InitCommonControlsEx

version

VerQueryValueA
GetFileVersionInfoA

msimg32

GradientFill

advapi32

ReportEventA
RegisterEventSourceA
CryptVerifySignatureA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptImportKey
CryptReleaseContext
OpenProcessToken
GetTokenInformation
ImpersonateLoggedOnUser
GetUserNameA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CryptAcquireContextA
DeregisterEventSource

ole32

CoTaskMemFree
CoInitialize
OleInitialize
CoCreateInstance
OleUninitialize
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 962KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07ec306d8c265e055632800f0622f63c

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

3b:17:b7:3a:15:a4:8a:30:dd:2e:dc:71Certificate

Extended Key Usages

Key Usages

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

96:18:0c:da:50:d7:94:14:c1:b5:06:47:50:f7:a0:e9:42:ae:82:80:2e:1f:0a:64:d6:de:aa:f3:73:13:c0:9fSigner

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

shell32

wsock32

shlwapi

comctl32

version

msimg32

advapi32

ole32

oleaut32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 499KB - Virtual size: 498KB

.data Size: 962KB - Virtual size: 3.7MB

.rsrc Size: 5.7MB - Virtual size: 5.7MB

.reloc Size: 66KB - Virtual size: 66KB

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

3b:17:b7:3a:15:a4:8a:30:dd:2e:dc:71
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

96:18:0c:da:50:d7:94:14:c1:b5:06:47:50:f7:a0:e9:42:ae:82:80:2e:1f:0a:64:d6:de:aa:f3:73:13:c0:9f
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 499KB - Virtual size: 498KB

.data
Size: 962KB - Virtual size: 3.7MB

.rsrc
Size: 5.7MB - Virtual size: 5.7MB

.reloc
Size: 66KB - Virtual size: 66KB