122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1N

General

Target
122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1N
Size 80KB
Sample241110-bcat9svpcx
SHA256 122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1
MD5 c98bb45f5b58a274e366c1c56f263ac0
SHA1 fd9aa4cb8f112fc130d29a2759cf2d10f2126dcc
SHA512 4424df4ea662e5ea77609d86d6a8b6af7ed2c1feed9e7c14ad237823806553632d367bfa2061aafe5483891649f642ce91db36753603cf47915116ce51004a1e
SSDEEP 1536:M+gNsi/OTW1bk3FwErVvHcT2P4OFCrJZlHES8Vd+jF:MxZ1bk1FVvHcTmdFCrJRR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1N

File Explorer

122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1N

.exe 80KB

122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1N

IMPHASH 79b96456f9efc94c33ade5e8ec421b2f
SHA256 122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1
MD5 c98bb45f5b58a274e366c1c56f263ac0
SHA1 fd9aa4cb8f112fc130d29a2759cf2d10f2126dcc
SHA512 4424df4ea662e5ea77609d86d6a8b6af7ed2c1feed9e7c14ad237823806553632d367bfa2061aafe5483891649f642ce91db36753603cf47915116ce51004a1e
SSDEEP 1536:M+gNsi/OTW1bk3FwErVvHcT2P4OFCrJZlHES8Vd+jF:MxZ1bk1FVvHcTmdFCrJRR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5293

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId CloseHandle CreateFileA GetModuleFileNameA Sleep CreateThread SetLastError GetLastError TerminateProcess OpenProcess ReadFile GetFileSize WriteFile SetFilePointer SetFileAttributesA GetLocalTime ResumeThread SetThreadContext VirtualProtectEx WriteProcessMemory VirtualAllocEx IsBadReadPtr FreeLibrary GetProcAddress LoadLibraryA ReadProcessMemory GetThreadContext CreateProcessA GetCurrentDirectoryA GetWindowsDirectoryA MapViewOfFile OpenFileMappingA GetCommandLineA GetModuleHandleA GetTempFileNameA GetTempPathA DeleteFileA CopyFileA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA GetProcessVersion lstrcmpiA WideCharToMultiByte MultiByteToWideChar

user32

MessageBoxA

msvcrt

memcpy ??3@YAXPAX@Z ftell fclose fread fseek strcpy __CxxFrameHandler _wcsnicmp wcscpy fwrite time memset strcat strlen ??2@YAPAXI@Z _strnicmp fopen wcslen _itoa _wcsicmp

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z ??0_Lockit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

Sharing

General

Malware Config

Signatures

File Explorer

122e116a17db5bdcd224d7c4d83d6ad05b924269afb91349928c72a5c2461ee1N

kernel32

user32

msvcrt

msvcp60

generic