bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807

General

Target
bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807
Size 298KB
Sample260419-2fxfjsbs6m
SHA256 bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807
MD5 4bcd2675d07f91cf9c113c59cbf60039
SHA1 69f8e7460e2ff4894dbe0206fbf48d02d0fd6f41
SHA512 48ccb82cdee481aae945b6583bf264195c20911d60d607bbd514bd99c0edab14ce64008a0072d511c0d95efe059f6b05809b8f55517942c477ea3a09637d6655
SSDEEP 6144:t+QMND6kbv7d5+KhQIqEPkUxprpeUWwZWM52zg1QNgnIFbe+4+Y7f8Hi:t+50kj3hQoPkipnrZ52zg1qIr8H
TLSH
T13C549E20795280B2C6A357328D34BB7919BEFD608B3156DB67A81E2C6D305C17B3D1BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807

File Explorer

bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807

.dll 298KB

bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807

IMPHASH b6b3b87a145e7ae52e4e6b4abe645544
SHA256 bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807
MD5 4bcd2675d07f91cf9c113c59cbf60039
SHA1 69f8e7460e2ff4894dbe0206fbf48d02d0fd6f41
SHA512 48ccb82cdee481aae945b6583bf264195c20911d60d607bbd514bd99c0edab14ce64008a0072d511c0d95efe059f6b05809b8f55517942c477ea3a09637d6655
SSDEEP 6144:t+QMND6kbv7d5+KhQIqEPkUxprpeUWwZWM52zg1QNgnIFbe+4+Y7f8Hi:t+50kj3hQoPkipnrZ52zg1qIr8H
TLSH
T13C549E20795280B2C6A357328D34BB7919BEFD608B3156DB67A81E2C6D305C17B3D1BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

50220

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

setupapi

SetupDiGetDeviceRegistryPropertyA SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo

kernel32

RegisterWaitForSingleObject WriteConsoleW CreateFileW DecodePointer HeapReAlloc HeapSize CreateFileA ReadFile WriteFile CloseHandle GetLastError DeviceIoControl GetOverlappedResult CancelIo ResetEvent WaitForSingleObject CreateEventW FreeLibrary GetProcAddress LoadLibraryA LocalFree FormatMessageW QueryPerformanceCounter DuplicateHandle WaitForSingleObjectEx Sleep GetCurrentProcess GetCurrentThread GetCurrentThreadId EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateTimerQueue SetEvent SignalObjectAndWait SwitchToThread CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait EncodePointer GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualAlloc VirtualFree VirtualProtect ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW RaiseException RtlUnwind GetModuleHandleExW HeapAlloc HeapFree ExitProcess GetStdHandle GetFileType MultiByteToWideChar LCMapStringW SetFilePointerEx GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetStringTypeW SetStdHandle

Name

.text

Size

216KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

bf9c5c359bc37f3e42d23dc774a6ecae1927df8899e559e34428ba842d709807

setupapi

kernel32

generic