8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f

Sharing

Copy URL Twitter E-mail

General

Target
8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f
Size 341KB
Sample241113-p1bncsvrbq
SHA256 8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f
MD5 bb92679eb9caf1a1bb7d35644ebf0060
SHA1 05c3776c7b41f3aa4c8af4460dbfa7cb0efa5554
SHA512 d0c0ce294458420baeee10c52a342e2e2052bd0390141db1a89215210e1e2755935c4d657cf1bb5dd785d0e58ff80d9a9ccfc2f0080450e8921a7a58d32ded04
SSDEEP 6144:BXb7J0UaAPOG03nKNkg/Zo7tLM/hSED2SmlUmToM:db7mOPOGinKNXmq3GlvToM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f

File Explorer

8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f

.exe 341KB

8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f

IMPHASH f0a1adf2f5b7a4f0da06f0ae432d3dc6
SHA256 8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f
MD5 bb92679eb9caf1a1bb7d35644ebf0060
SHA1 05c3776c7b41f3aa4c8af4460dbfa7cb0efa5554
SHA512 d0c0ce294458420baeee10c52a342e2e2052bd0390141db1a89215210e1e2755935c4d657cf1bb5dd785d0e58ff80d9a9ccfc2f0080450e8921a7a58d32ded04
SSDEEP 6144:BXb7J0UaAPOG03nKNkg/Zo7tLM/hSED2SmlUmToM:db7mOPOGinKNXmq3GlvToM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\burikax\gulerokafuf\parof.pdb

kernel32

QueryDosDeviceA SetHandleInformation WaitForSingleObject GetComputerNameW BackupSeek _lclose GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesA GetConsoleTitleA GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW FindResourceExA GetCalendarInfoA FindNextVolumeW GetConsoleFontSize GetACP lstrlenW IsBadStringPtrA GlobalUnlock GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc HeapSize BeginUpdateResourceW ScrollConsoleScreenBufferW GetConsoleDisplayMode _hwrite SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA GetNumberFormatW AddAtomW RemoveDirectoryW GetDiskFreeSpaceA EnumResourceTypesW GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetShortPathNameW FindAtomW FileTimeToLocalFileTime DeleteTimerQueueTimer AddConsoleAliasA DebugBreak InitializeCriticalSectionAndSpinCount GetConsoleAliasA ReadConsoleA EnumResourceNamesW lstrlenA WriteProfileSectionA MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharLowerBuffW GetWindowLongW GetSysColorBrush SetCaretPos

gdi32

SetColorAdjustment GetCharABCWidthsW GetCharWidthW

advapi32

CloseEventLog

ole32

OleQueryCreateFromData

Sharing

General

Malware Config

Signatures

File Explorer

8bb43909e515431f2f131ee4fd5ef4d3d4029a4bb731bf2dbc3441bb16131e9f

kernel32

user32

gdi32

advapi32

ole32

generic