bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0

Sharing

Copy URL Twitter E-mail

General

Target
bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0
Size 3.8MB
Sample260827-mgxelsshmg
SHA256 bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0
MD5 49ea2bb4fd365c924195068411495122
SHA1 f2d5bbf195cc626f1ba971df28aa8f7fe5160b70
SHA512 71f2d894b9357a7bb73e8daad8aaac55cecf8158a2cbfbb4cc06139260093fc7b2689ad35f9a4d556c0c9c247138094973b49f5c569130443efe5dcb1ba218a9
SSDEEP 98304:flG4VZ/c8/CBS/ofRYU/cZXwzZCzx0AOxK:Z5c8/CBSgfC88gzAx0ho
TLSH
T182066A9B395AD40ED74900B29FD087E062B07DF002EB56FF52C6B2057639EE6E0F516A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0

File Explorer

bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0

.exe 3.8MB

bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0

IMPHASH a48e7bc530a045b0309c2eb480c4d084
SHA256 bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0
MD5 49ea2bb4fd365c924195068411495122
SHA1 f2d5bbf195cc626f1ba971df28aa8f7fe5160b70
SHA512 71f2d894b9357a7bb73e8daad8aaac55cecf8158a2cbfbb4cc06139260093fc7b2689ad35f9a4d556c0c9c247138094973b49f5c569130443efe5dcb1ba218a9
SSDEEP 98304:flG4VZ/c8/CBS/ofRYU/cZXwzZCzx0AOxK:Z5c8/CBSgfC88gzAx0ho
TLSH
T182066A9B395AD40ED74900B29FD087E062B07DF002EB56FF52C6B2057639EE6E0F516A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

91376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer GetFileType DuplicateHandle CreateFileA ReadFile SystemTimeToFileTime GetCurrentDirectoryA DosDateTimeToFileTime SetFileTime WriteFile SetEnvironmentVariableA CompareStringW CompareStringA SetEndOfFile GetFileAttributesA LCMapStringA GetStringTypeW GetStringTypeA GetExitCodeProcess HeapFree SetStdHandle IsBadCodePtr SetUnhandledExceptionFilter GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetOEMCP GetACP GetCPInfo SetHandleCount VirtualAlloc VirtualFree HeapCreate HeapDestroy HeapReAlloc LocalFree GetModuleHandleA GetCurrentProcess WideCharToMultiByte MoveFileA ReleaseMutex CreateMutexA FindResourceA LoadResource LockResource SizeofResource GetLocalTime GetComputerNameA LocalAlloc GetProcessHeap LCMapStringW HeapAlloc MultiByteToWideChar GetDiskFreeSpaceExA GetLongPathNameA Sleep RemoveDirectoryA FindFirstFileA FindNextFileA FindClose GetLastError CreateProcessA WaitForSingleObject CloseHandle DeleteFileA SetFileAttributesA CopyFileA MoveFileExA GetDiskFreeSpaceA GetShortPathNameA WinExec WritePrivateProfileStringA LoadLibraryA GetPrivateProfileStringA GetProcAddress FreeLibrary GetWindowsDirectoryA CreateDirectoryA GetVersionExA GetModuleFileNameA GetSystemDirectoryA UnhandledExceptionFilter TlsGetValue SetLastError TlsAlloc GetCurrentThreadId InterlockedIncrement OutputDebugStringA lstrlenA FlushFileBuffers InterlockedDecrement GetStdHandle DebugBreak LeaveCriticalSection EnterCriticalSection ExitProcess TerminateProcess RtlUnwind ResumeThread CreateThread TlsSetValue ExitThread IsBadWritePtr IsBadReadPtr HeapValidate SetCurrentDirectoryA GetStartupInfoA GetCommandLineA GetVersion InitializeCriticalSection DeleteCriticalSection

user32

LoadCursorA CallWindowProcA SetCursor GetDlgCtrlID GetWindowTextA KillTimer EndPaint InvalidateRect SetTimer ShowWindow BeginPaint GetClientRect FillRect LoadIconA LoadBitmapA SetWindowTextA SetDlgItemTextA GetDlgItemTextA EndDialog EnableWindow MessageBoxA DialogBoxParamA InvalidateRgn GetFocus DrawFocusRect GetDlgItem GetDC SendMessageA GetSystemMetrics SetWindowPos SetWindowLongA ReleaseDC

gdi32

CreateSolidBrush SetBkMode CreateCompatibleDC StretchBlt CreateFontA TextOutA DeleteDC SetTextColor SetBkColor ExtTextOutA GetObjectA CreateFontIndirectA SelectObject GetTextExtentPoint32A SetStretchBltMode

advapi32

RegQueryValueExA RegOpenKeyA LookupPrivilegeValueA AdjustTokenPrivileges SetEntriesInAclA SetNamedSecurityInfoA OpenProcessToken StartServiceA OpenSCManagerA OpenServiceA CloseServiceHandle ControlService GetUserNameA GetSidLengthRequired InitializeSid RegOpenKeyExA GetLengthSid InitializeAcl AddAccessAllowedAceEx InitializeSecurityDescriptor SetSecurityDescriptorDacl RegSetKeySecurity RegCreateKeyExA RegFlushKey AllocateAndInitializeSid FreeSid RegCreateKeyA RegSetValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA ShellExecuteA

ole32

CoInitialize CoCreateInstance

comctl32

ord17

shlwapi

StrFormatByteSizeW SHDeleteKeyA PathFileExistsA

wininet

InternetGetConnectedState

Sharing

General

Malware Config

Signatures

File Explorer

bf7b0d6230171315002d7abb83ad16a5e0ba31cf85aa9e61e68e883843610aa0

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

shlwapi

wininet

generic