bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde

General

Target
bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde
Size 5.1MB
Sample251210-r3125sew8a
SHA256 bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde
MD5 2bb2a469ead79203f3bd182889006505
SHA1 1896570f5a274ea2bb353c796ef607ad55eead1c
SHA512 1f53b146591032ea4b3f52c388a59b2860ac6d6b9b10aee0622766e9cb581efaf487c98119e61d145d78a606833261cfa0df0c5767f01b22f451057954d2b6c8
SSDEEP 98304:dry01LOR2tqL6mTPJ0yI0E2L8ZulFfYbV1M9j2D6GAk:Jy01La2tqL6mTPJ0L0E2L8ZulpYbHM9/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde

File Explorer

bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde

.dll 5.1MB

bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde

IMPHASH 586df83977507c1e2bf38dea296592b3
SHA256 bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde
MD5 2bb2a469ead79203f3bd182889006505
SHA1 1896570f5a274ea2bb353c796ef607ad55eead1c
SHA512 1f53b146591032ea4b3f52c388a59b2860ac6d6b9b10aee0622766e9cb581efaf487c98119e61d145d78a606833261cfa0df0c5767f01b22f451057954d2b6c8
SSDEEP 98304:dry01LOR2tqL6mTPJ0yI0E2L8ZulFfYbV1M9j2D6GAk:Jy01La2tqL6mTPJ0L0E2L8ZulpYbHM9/
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

3989627

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

VirtualAlloc GetProcAddress GetFileSize SetStdHandle HeapDestroy GetCPInfo SetUnhandledExceptionFilter SetLastError GetCurrentProcessId GetStartupInfoW WideCharToMultiByte GetCurrentProcess HeapAlloc InitializeProcThreadAttributeList UpdateProcThreadAttribute GetACP GetCommandLineW FreeEnvironmentStringsW FindNextFileW TerminateProcess IsDebuggerPresent HeapReAlloc CreateMutexW HeapFree GetProcessHeap GetModuleHandleW FindNextFileA FlushFileBuffers GetTickCount TlsSetValue GetStringTypeW SetFilePointer DeleteCriticalSection ExitProcess GetLastError LCMapStringW WaitForDebugEvent lstrlenA MultiByteToWideChar CloseHandle FindClose WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP HeapSize GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetModuleFileNameW GetModuleHandleExW RaiseException LoadLibraryExW TlsFree TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer InterlockedFlushSList RtlUnwind IsProcessorFeaturePresent UnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter LeaveCriticalSection EnterCriticalSection WriteFile FreeLibrary GetFileType GetUserDefaultLCID GetStdHandle GetFileAttributesA CreateFileW DecodePointer

user32

GetClientRect CreateDialogParamA RegisterClassA CharNextA EndPaint DefWindowProcW EnableMenuItem

advapi32

RegEnumKeyA

Sharing

General

Malware Config

Signatures

File Explorer

bf4d6c9798c27a18c65b93ee9568a8cc138b420ba69283af967e752e7c516bde

kernel32

user32

advapi32

generic