bcd3c0a30f7cb5a62986651726e5dd209e2660ce7c3041a30e95e0b41477fe4d

Sharing

Copy URL

Twitter E-mail

General

Target

bcd3c0a30f7cb5a62986651726e5dd209e2660ce7c3041a30e95e0b41477fe4d
Size

5.2MB
MD5

2e48850f4a5d7e9eff7cade2e7d751fb
SHA1

01a99e67ed4613b486d8973efb4b0ba5cced79a8
SHA256

bcd3c0a30f7cb5a62986651726e5dd209e2660ce7c3041a30e95e0b41477fe4d
SHA512

736d34deb51986aa0efeeef272cfa725d117b27b76d98af97255fc888240594462793a7e45f9b35ef428d9373016ae13451c9172c888f63654093c83a46698fb
SSDEEP

98304:H6VPT7txfJOgn+fdFuQ9wMXE196iRPxEv3qn7xmyXDwBu0f3BkLfOnzO:aVnfJl0FuQ9wM0QGuPqnNmyXDwBI+6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcd3c0a30f7cb5a62986651726e5dd209e2660ce7c3041a30e95e0b41477fe4d

Files

bcd3c0a30f7cb5a62986651726e5dd209e2660ce7c3041a30e95e0b41477fe4d
.exe windows x86

078e11b4e20932b327a6594c1df754ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
GetCurrentProcess
TerminateProcess
DeleteFileA
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
MoveFileA
WaitForSingleObject
CreateProcessA
ResumeThread
ResetEvent
CreateEventA
SetEvent
Sleep
GetShortPathNameA
WriteFile
CreateFileA
GetCurrentDirectoryA
VirtualAlloc
VirtualFree
HeapAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CompareStringW
CompareStringA
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
OpenProcess
HeapFree
CloseHandle
FreeLibrary
EnterCriticalSection
GetVersionExA
SetStdHandle
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
CopyFileA
GetFileSize
SetFilePointer
ReadFile
MoveFileExA
FlushFileBuffers
FileTimeToSystemTime
GetFileInformationByHandle
GetFileType
GetCurrentThreadId
ExitThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
FileTimeToLocalFileTime
PeekNamedPipe
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetModuleHandleA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
SetEnvironmentVariableA

user32

FindWindowA
GetWindowRect
GetSystemMetrics
DialogBoxParamA
PostQuitMessage
LoadIconA
SetDlgItemTextA
DefWindowProcA
MessageBoxA
InvalidateRect
GetSystemMenu
EnableMenuItem
GetDlgItem
EnableWindow
SendMessageA
SendDlgItemMessageA
MoveWindow

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

shlwapi

PathFileExistsA
PathFindFileNameA
PathAppendA
PathRemoveBackslashA
PathRemoveBlanksA
PathRemoveFileSpecA
PathFindExtensionA

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

078e11b4e20932b327a6594c1df754ff

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

shlwapi

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 7KB - Virtual size: 20KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 7KB - Virtual size: 20KB

.rsrc
Size: 52KB - Virtual size: 52KB