bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9N

Sharing

Copy URL Twitter E-mail

General

Target
bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9N
Size 204KB
Sample241104-wt1r8stpcv
SHA256 bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9
MD5 2811be12df31f3fe588fb1c847196aa0
SHA1 c539d5c06e0bd41c04dc20b6cff80e506c3699f0
SHA512 d96aea999ba99a10b5c4393c5f39e2005f9cbcac2821eb45df693817d8c67dfb61bfad14ab4c9cb51831b08ca3d831116840e71a012deb91a417d5c180008da8
SSDEEP 3072:HdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUE:9GazIc6TVBMrOpzeJEsuirSGEMpgE8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9N

File Explorer

bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9N

.exe 204KB

bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9N

IMPHASH e12f72e7fe59535708698b4de0340a02
SHA256 bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9
MD5 2811be12df31f3fe588fb1c847196aa0
SHA1 c539d5c06e0bd41c04dc20b6cff80e506c3699f0
SHA512 d96aea999ba99a10b5c4393c5f39e2005f9cbcac2821eb45df693817d8c67dfb61bfad14ab4c9cb51831b08ca3d831116840e71a012deb91a417d5c180008da8
SSDEEP 3072:HdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUE:9GazIc6TVBMrOpzeJEsuirSGEMpgE8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetOEMCP GetWindowsDirectoryW SetErrorMode CreateFileMappingA GetComputerNameA QueryPerformanceCounter GetModuleFileNameA SetPriorityClass lstrcpyn GetFileType InitializeCriticalSection GetLogicalDrives GetProcessHeap GetNumberFormatA LocalAlloc CreateEventW GetTimeFormatA GetVersionExW GetProcessHeaps CopyFileExW GetHandleInformation GlobalGetAtomNameA FlushFileBuffers CreateNamedPipeW CopyFileA GetCurrentDirectoryA OpenWaitableTimerW GetCommandLineW lstrlen CopyFileExA FreeLibrary SetComputerNameW GetProcAddress EnumCalendarInfoA FindAtomA GetModuleHandleW CreatePipe OpenProcess CreateMailslotW BeginUpdateResourceW IsDebuggerPresent GetVersionExA GetEnvironmentStringsW GetModuleHandleA

user32

GetSysColorBrush RegisterClassExW GetWindowLongA SetMenu ArrangeIconicWindows DialogBoxParamW LoadIconW CreateIcon CharNextA GetMessageW LoadImageA TrackPopupMenuEx mouse_event GetParent OpenClipboard LoadIconW GetIconInfo CheckRadioButton GetIconInfo GetWindowTextW OffsetRect SetWindowPos GetMenuStringW CopyRect EnumWindows SetFocus SetDlgItemInt GetSystemMetrics GetWindowTextLengthA GetCapture GetMenuItemCount EnumDesktopsA DestroyCursor GetClassInfoExA UpdateLayeredWindow MonitorFromWindow FrameRect EnumChildWindows FindWindowA LoadBitmapW RegisterClassExA CloseWindow IsMenu MessageBeep AdjustWindowRect EnumDesktopWindows DeleteMenu MonitorFromRect IsWindow

gdi32

ExtFloodFill ExtEscape EqualRgn CopyEnhMetaFileW SetPixelFormat ResetDCW CreatePolygonRgn CreateDCA SetTextJustification GetKerningPairsA GetDCPenColor SetPaletteEntries AbortPath CreatePolyPolygonRgn GetBkMode

advapi32

RegOpenKeyA RegQueryValueW RegReplaceKeyW RegCreateKeyExW RegRestoreKeyA

oleaut32

CreateDispTypeInfo

opengl32

glColor3iv

winspool.drv

SetPortW AddPortExW ScheduleJob PrinterProperties XcvDataW FindNextPrinterChangeNotification EnumPrintProcessorDatatypesW SetPortA ResetPrinterW

oledlg

OleUIInsertObjectA

wsock32

WSARecvEx WSASetBlockingHook shutdown

Name

.text

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.oqngCF

Size

1KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

4KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.LUV

Size

1024B

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.GOTYM

Size

2KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.AGbvFQ

Size

2KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kkPQAu

Size

512B

Virtual Size

253KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

bbfbb00e680f93e84ded71cf070b8d8ff1f680cd6518c6d15622d77809900dc9N

kernel32

user32

gdi32

advapi32

oleaut32

opengl32

winspool.drv

oledlg

wsock32

generic