be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b

Sharing

Copy URL Twitter E-mail

General

Target
be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b
Size 1.5MB
Sample260831-h3thmaxbjc
SHA256 be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b
MD5 9366fd19ff7c95a7127392e2eb98c3e5
SHA1 38a6bfb78d8874e053363225e56e7ea7d9be3668
SHA512 330ef3a1698c5c45033150e51d1764fc3f89be7ffb5dd30f402b159754fa6258c9dc5d9d9bd8e551aa90e0abd9ccccbd1f76af4eeacb419e2e6b050388d5a718
SSDEEP 49152:SR6UzGAwNw9/9/MuifYJNLODFhhYPAtp5p:gJZ
TLSH
T1217518627A885333E2E322B1D58ED3E5531D90B4633721D762C9859C3760DA34BBF6E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b

File Explorer

be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b

.exe 1.5MB

be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b

IMPHASH ec77ff6aea897ea83933e8a57006e922
SHA256 be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b
MD5 9366fd19ff7c95a7127392e2eb98c3e5
SHA1 38a6bfb78d8874e053363225e56e7ea7d9be3668
SHA512 330ef3a1698c5c45033150e51d1764fc3f89be7ffb5dd30f402b159754fa6258c9dc5d9d9bd8e551aa90e0abd9ccccbd1f76af4eeacb419e2e6b050388d5a718
SSDEEP 49152:SR6UzGAwNw9/9/MuifYJNLODFhhYPAtp5p:gJZ
TLSH
T1217518627A885333E2E322B1D58ED3E5531D90B4633721D762C9859C3760DA34BBF6E8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

304322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\7HS\Desktop\BO2012Launcher\build_min_x86\BO2012Launcher.pdb

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW

kernel32

GetCurrentDirectoryW CopyFileW WideCharToMultiByte WritePrivateProfileStringW GetPrivateProfileIntW GetFileAttributesW GetPrivateProfileStringW GetLocalTime ReadFile GetFileSizeEx WriteFile CreateFileW CloseHandle GetModuleFileNameW DeleteFileW RemoveDirectoryW FormatMessageW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess MultiByteToWideChar IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead GetConsoleMode GetConsoleCP HeapSize SetStdHandle OutputDebugStringW OutputDebugStringA SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExW FindFirstFileExA GetTimeZoneInformation SetConsoleCtrlHandler FindClose GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetFileType GetCurrentThread GetACP GetStdHandle GetModuleFileNameA GetModuleHandleExW ExitProcess HeapFree HeapReAlloc HeapAlloc InterlockedFlushSList InterlockedPushEntrySList LoadLibraryExW FreeLibrary GetLastError RaiseException RtlUnwind FindNextFileW FindFirstFileW CreateDirectoryW SetFilePointerEx FlushFileBuffers TerminateProcess WriteConsoleW

user32

SetMenuItemInfoW LoadIconW GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW PostMessageW GetWindowRect DestroyWindow GetDC FillRect CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW CreatePopupMenu RegisterClassExW TrackPopupMenu ShowWindow GetDlgCtrlID ClientToScreen MapWindowPoints TrackMouseEvent DestroyIcon DestroyMenu LoadCursorW GetClassNameW SetCursor SetWindowLongW GetClientRect AppendMenuW DrawTextW PostQuitMessage PtInRect UpdateWindow SetForegroundWindow InvalidateRect ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow GetWindowTextW GetMessageW MessageBoxW DispatchMessageW TranslateMessage AdjustWindowRect wsprintfW

gdi32

CreateSolidBrush DeleteObject SetBkColor GetStockObject CreateFontW EnumFontFamiliesExW SelectObject SetBkMode SetTextColor

Name

.text

Size

598KB

Virtual Size

598KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

112KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

800KB

Virtual Size

800KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

be4cf3baa682e1a1fe97ecd0bae298c08cc8ba8af0a15386f01be02f2ca1e97b

shell32

comctl32

shlwapi

kernel32

user32

gdi32

generic