bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1

General

Target
bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1
Size 1.4MB
Sample260826-ke1m5sstdz
SHA256 bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1
MD5 652c6a3d543ed15f561ed3735b6e4a4d
SHA1 83079fd3fb0e28bcd960fbd69537b787f48799bf
SHA512 4b1da7a253d8e30dec6cf6818932290a87a7a38528820276a29fb5628e33f9ae9b2419536903396009e26dcdbe5d2fd04a2119a94a7fa998197e040f62e2f924
SSDEEP 24576:XzSt0Sr/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:XGt0SrLNiXicJFFRGNzj3
TLSH
T1BC65F10135808470F7BA0B304965E8E4495CAD3C4BA4E9DFE3B83E3A5A746D39A3756F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1

File Explorer

bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1

.exe 1.4MB

bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1

IMPHASH 12bd3b1f5fc8c9769bdad31b90226a14
SHA256 bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1
MD5 652c6a3d543ed15f561ed3735b6e4a4d
SHA1 83079fd3fb0e28bcd960fbd69537b787f48799bf
SHA512 4b1da7a253d8e30dec6cf6818932290a87a7a38528820276a29fb5628e33f9ae9b2419536903396009e26dcdbe5d2fd04a2119a94a7fa998197e040f62e2f924
SSDEEP 24576:XzSt0Sr/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:XGt0SrLNiXicJFFRGNzj3
TLSH
T1BC65F10135808470F7BA0B304965E8E4495CAD3C4BA4E9DFE3B83E3A5A746D39A3756F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\AWork\_drw_main\SetupUE\Release\SetupUE.pdb

kernel32

GetProcAddress LoadLibraryA GetTimeZoneInformation GetLocaleInfoW GetCommandLineW CloseHandle GetModuleHandleW CreateProcessW GetModuleFileNameW LocalFree WriteConsoleW DecodePointer FlushFileBuffers FreeLibrary GetVersionExW WaitForSingleObject GetSystemInfo SetFilePointerEx GetConsoleMode GetConsoleCP HeapReAlloc HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW GetProcessHeap CreateFileW

user32

GetSystemMetrics

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

CommandLineToArgvW

netapi32

NetWkstaGetInfo NetApiBufferFree

Sharing

General

Malware Config

Signatures

File Explorer

bffdc17947da3d06569447c8739bbdf1a887dbe301febc3f4387df7f156c91f1

kernel32

user32

advapi32

shell32

netapi32

generic