BVT_Package_10[.]0[.]0[.]1086[.]exe

General

Target
BVT_Package_10.0.0.1086.exe
Size 22.1MB
Sample260824-t6flqaec23
SHA256 b5810406e2cd8e59ba0fa682f6b5c72cc30276779464751b292b86c40c2845ce
MD5 a3098124e281b61f16b234aed82f4fcf
SHA1 a35275f9854bab8593c7e7b17cdad2938901e2e7
SHA512 348d93c231acf07f14d5fe0084c285e8afe4125bfac34cb172a59cf2fdf6f965240611740a91886598df6fe6edc57888a6815fbe09099c661f5a19877e5f01b7
SSDEEP 393216:XAK1KBDF/K+Ti6XDG3aF037ybiLlH1Q4NZr8XgVBQDi4HzJ+CHut2B6Iqoj:wcaxy+TTXDS2Gl19VLVBQuqwCHut2BQo
TLSH
T17F373308E2E5CD31D0633876A6BBBB725DDE69F31722A55F6B081C578F615C0602A33E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BVT_Package_10.0.0.1086.exe

File Explorer

BVT_Package_10.0.0.1086.exe

.exe 22.1MB

BVT_Package_10.0.0.1086.exe

IMPHASH 87269679c0a401c85bb37d7dd224ac4c
SHA256 b5810406e2cd8e59ba0fa682f6b5c72cc30276779464751b292b86c40c2845ce
MD5 a3098124e281b61f16b234aed82f4fcf
SHA1 a35275f9854bab8593c7e7b17cdad2938901e2e7
SHA512 348d93c231acf07f14d5fe0084c285e8afe4125bfac34cb172a59cf2fdf6f965240611740a91886598df6fe6edc57888a6815fbe09099c661f5a19877e5f01b7
SSDEEP 393216:XAK1KBDF/K+Ti6XDG3aF037ybiLlH1Q4NZr8XgVBQDi4HzJ+CHut2B6Iqoj:wcaxy+TTXDS2Gl19VLVBQuqwCHut2BQo
TLSH
T17F373308E2E5CD31D0633876A6BBBB725DDE69F31722A55F6B081C578F615C0602A33E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

36590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GlobalAlloc GlobalLock GlobalHandle GlobalUnlock GlobalFree GlobalMemoryStatus LocalAlloc LocalFree DosDateTimeToFileTime lstrcmpiA lstrcpyA lstrcatA lstrlenA lstrlenW _lopen _lcreat GetWindowsDirectoryA CreateFileA _lclose _llseek GetVolumeInformationA VerifyVersionInfoW MultiByteToWideChar GetCommandLineA GetCommandLineW DeleteFileA FindNextFileA GetFileAttributesA GetLongPathNameA RemoveDirectoryA WaitForSingleObject CreateProcessA GetTickCount GetSystemDirectoryA LoadLibraryExA GetTempPathA CopyFileA GetSystemTime GetVersion CreateProcessW ExitProcess SetErrorMode CloseHandle WriteFile SetFileTime LocalFileTimeToFileTime GetDriveTypeA FindFirstFileA _lread FindClose CreateDirectoryA GetCurrentDirectoryA SetCurrentDirectoryA VerSetConditionMask GetEnvironmentVariableA _lwrite RaiseException GetLastError GetSystemInfo VirtualProtect VirtualQuery FreeLibrary GetModuleHandleW GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW WideCharToMultiByte GetStdHandle GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType FindFirstFileExA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers DecodePointer CreateFileW WriteConsoleW

gdi32

SetTextAlign SetTextColor SetBkColor GetTextExtentPoint32A GetBkColor SelectObject GetDeviceCaps DeleteObject DeleteDC CreateFontIndirectA CreateDCA ExtTextOutA

advapi32

RegQueryValueW RegGetValueW RegOpenKeyW RegEnumValueW RegCloseKey

Name

.text

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

284B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

_winzip_

Size

21.9MB

Virtual Size

21.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

BVT_Package_10.0.0.1086.exe

kernel32

gdi32

advapi32

generic