bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243

General

Target
bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243
Size 1.0MB
Sample241111-gl8esatgrm
SHA256 bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243
MD5 c7d2dfc25e8ca005f181a398e463319c
SHA1 cc4707caef162557bf1249b00660cdba705b4f83
SHA512 3d12b43cc15c1db868057d4c4f8b2a79e75c884391de87f63c84ea4d7683d75c96d003bec55b4e8ab90d1209cdb3c6f8e43d0288d9e0236ec4fcd6c5fa8e9679
SSDEEP 24576:egHEObseZu44wqJnysRme1JS0Tk6G3rVu+T1/WcZ6:eCb6nyymei0T23U+TRW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243

File Explorer

bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243

.exe 1.0MB

bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243

IMPHASH 9bf03dbaa4f43e7b3f88544a0f4bef62
SHA256 bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243
MD5 c7d2dfc25e8ca005f181a398e463319c
SHA1 cc4707caef162557bf1249b00660cdba705b4f83
SHA512 3d12b43cc15c1db868057d4c4f8b2a79e75c884391de87f63c84ea4d7683d75c96d003bec55b4e8ab90d1209cdb3c6f8e43d0288d9e0236ec4fcd6c5fa8e9679
SSDEEP 24576:egHEObseZu44wqJnysRme1JS0Tk6G3rVu+T1/WcZ6:eCb6nyymei0T23U+TRW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12145

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasA SetDefaultCommConfigW InterlockedCompareExchange SleepEx GetWindowsDirectoryA EnumTimeFormatsW ActivateActCtx GlobalAlloc GetSystemDirectoryW GetFirmwareEnvironmentVariableA LoadLibraryW TerminateThread CopyFileW ReadFileScatter CreateEventA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW GlobalUnlock RaiseException EnumCalendarInfoW GetProcAddress OpenWaitableTimerA GlobalGetAtomNameW AddAtomA EnumResourceTypesW FindFirstVolumeMountPointA GetModuleHandleA FindNextFileW GetConsoleCursorInfo GetShortPathNameW GetCPInfoExA SetCalendarInfoA ReadConsoleInputW LocalSize EnumCalendarInfoExA LocalFree CopyFileExA lstrcmpA _llseek SetLastError PulseEvent GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TerminateProcess GetCurrentProcess GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

gdi32

GetTextFaceA

advapi32

LookupAccountSidW

Sharing

General

Malware Config

Signatures

File Explorer

bfd234bc93c722e4f31b1b135a9d6f8bea69f02ea34e4ad5ae2dc0e8bbe6a243

kernel32

user32

gdi32

advapi32

generic