bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2

Sharing

Copy URL Twitter E-mail

General

Target
bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2
Size 476KB
Sample261001-t42feayfma
SHA256 bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2
MD5 058d001c90027dfe1437c17a4afdd10c
SHA1 fc9b0c45a720972a95fef0895414e78fed942d14
SHA512 0b9d644424f1ceead029b7e39bf1dab6b3cba51e284512b2679c530024b2a33617c2e8dcbbf81c1472028cef48e62656744dcb03210ee1c39915bb44528386f3
SSDEEP 6144:0V/m+JOBgs7gGD0XYpk4/umj26gvbFbeNxBuL:fNXAXYpk4WbFbeNxB
TLSH
T166A4A32163E89717F1A787342DF557603A327811BB27CBCF6604696C08B4BE29E71F26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2

File Explorer

bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2

.exe 476KB

bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2

IMPHASH 626279246ed7d9326d8a226d4f5f12b4
SHA256 bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2
MD5 058d001c90027dfe1437c17a4afdd10c
SHA1 fc9b0c45a720972a95fef0895414e78fed942d14
SHA512 0b9d644424f1ceead029b7e39bf1dab6b3cba51e284512b2679c530024b2a33617c2e8dcbbf81c1472028cef48e62656744dcb03210ee1c39915bb44528386f3
SSDEEP 6144:0V/m+JOBgs7gGD0XYpk4/umj26gvbFbeNxBuL:fNXAXYpk4WbFbeNxB
TLSH
T166A4A32163E89717F1A787342DF557603A327811BB27CBCF6604696C08B4BE29E71F26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ExtractIconExW ord18 ord25 SHBindToParent SHFileOperationW SHGetDataFromIDListW SHGetDesktopFolder ShellAboutW ShellExecuteExW ShellExecuteW

comdlg32

ChooseFontW CommDlgExtendedError

comctl32

CreateStatusWindowW CreateToolbarEx ImageList_Destroy ImageList_DrawEx ImageList_LoadImageW InitCommonControlsEx

ole32

CoGetMalloc CoInitialize CoUninitialize

mpr

WNetConnectionDialog WNetDisconnectDialog WNetGetLastErrorW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

user32

BeginDeferWindowPos BeginPaint CallNextHookEx CallWindowProcW CharUpperW CheckMenuItem CreatePopupMenu CreateWindowExW DefFrameProcW DefMDIChildProcW DeferWindowPos DestroyIcon DestroyWindow DialogBoxParamW DispatchMessageW DrawIconEx DrawTextW EndDeferWindowPos EndDialog EndPaint FillRect GetCapture GetClientRect GetCursorPos GetDC GetDlgItem GetFocus GetKeyState GetMenuItemCount GetMessageW GetParent GetScrollPos GetSubMenu GetSystemMetrics GetWindow GetWindowInfo GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextW InvalidateRect IsIconic IsWindowVisible IsZoomed LoadAcceleratorsW LoadCursorW LoadIconW LoadImageW LoadMenuW LoadStringW MapWindowPoints MessageBoxW MoveWindow PostQuitMessage RedrawWindow RegisterClassExW RegisterClassW RegisterClipboardFormatW ReleaseCapture ReleaseDC ScreenToClient ScrollWindowEx SendMessageW SetCapture SetCursor SetDlgItemTextW SetFocus SetWindowLongW SetWindowPlacement SetWindowTextW SetWindowsHookExW ShowWindow TrackPopupMenu TranslateAcceleratorW TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UpdateWindow WinHelpW wsprintfW

gdi32

CreateFontIndirectW CreateFontW CreateRectRgn CreateRectRgnIndirect CreateSolidBrush DeleteObject ExtSelectClipRgn GetClipRgn GetDeviceCaps GetObjectW GetStockObject GetTextExtentPoint32W LineTo MoveToEx Rectangle SelectClipRgn SelectObject SetBkMode SetTextColor

advapi32

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegQueryValueW RegSetValueExW

shlwapi

StrFormatByteSizeW

ucrtbase

__p___argc __p___wargv __stdio_common_vswprintf _assert _configure_wide_argv _crt_atexit _get_initial_wide_environment _initialize_wide_environment _initterm _initterm_e _set_app_type _wsplitpath exit memcmp memcpy memmove memset qsort setlocale tolower wcslen wcsrchr

kernel32

CloseHandle CompareFileTime CreateFileW FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FormatMessageW GetCommandLineW GetCurrentDirectoryW GetDateFormatW GetDiskFreeSpaceExW GetDriveTypeW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetLogicalDriveStringsW GetModuleHandleW GetNumberFormatW GetProcAddress GetStartupInfoW GetTimeFormatW GetVolumeInformationW GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree LocalFree MulDiv MultiByteToWideChar SetCurrentDirectoryW SetErrorMode lstrcmpW lstrcmpiW

ntdll

_chkstk

Sharing

General

Malware Config

Signatures

File Explorer

bcf6f8cab4f77da5fb4db37140f41e04d801e1e478ccd2cd82c4acc14dfe38a2

shell32

comdlg32

comctl32

ole32

mpr

version

user32

gdi32

advapi32

shlwapi

ucrtbase

kernel32

ntdll

generic