bweck[.]exe | Triage

Sharing

General

Target

bweck.exe
Size

136KB
MD5

e91dce209046d1e1823186a642e509fd
SHA1

e143bbb132ef2568bba3159cb955b9c3c445f36a
SHA256

7beed36d940922f7c2c39ff8cde7c85e4652736ed9b5fbd988af6f1d8a9ce1ad
SHA512

a2b83133403877d09c496dce1d3de4a84b1b6589f0e40003292590835a733fdada0c083201ded2851db73f177280b0183a41820952338dc6bc43eff0899e1d45
SSDEEP

1536:1YUpGM5BbbQnKmAcLxNBsDdNES/5fCPmtGGx/vIapI1HQY4Pne5RkVzY:1YUjngMUNBa1CPOZxHIap6H3YneoW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bweck.exe

Files

bweck.exe
.exe windows x86

ef8b295a9035ba84fbd07997c72bddae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

atan2
__p___initenv
calloc
_except_handler3
_XcptFilter
_controlfp
__setusermatherr
__p__fmode
free
_adjust_fdiv
__p__commode
__set_app_type
_initterm
_exit

kernel32

GetLocalTime
GetCurrentDirectoryA
ExitProcess
MulDiv
GetCommandLineW
VirtualProtectEx
GetTickCount
SetErrorMode
GetProcessHeap
GetLocaleInfoW
GetTempPathW
GetStringTypeW
GlobalLock
GetSystemDefaultLCID
IsValidCodePage

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ