bc88e0ba1fcd3f2c3640ae6deb7087693ae8cc7f

General

Target

bc88e0ba1fcd3f2c3640ae6deb7087693ae8cc7f
Size

100KB
MD5

1b0a9319b0751a77cc0467213a736711
SHA1

bc88e0ba1fcd3f2c3640ae6deb7087693ae8cc7f
SHA256

183fdc9a398a6e94827387253f51d76340a161203f821bfa1b88dd5d5a0315d1
SHA512

c4d04ac3c2bd34ba0702add01d567a336ee0c625f5fda9d2656546673292ae7a08a878f3780e7fe1d2c7920dae940a08cd2135d95b9a0824a8069e05f8509293
SSDEEP

768:vhf0l75dNxSrY4cAQjr93UysPKNO8AOXeE/Rr7mI0WynmllpArZU9QZU9:Ol3vSrY4BQj5IPEO8AoRr7709+lpKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc88e0ba1fcd3f2c3640ae6deb7087693ae8cc7f

Files

bc88e0ba1fcd3f2c3640ae6deb7087693ae8cc7f
.exe windows x86

dd454b45342bdf7c02c5c5b14c94d6f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetPrivateProfileStringA
GetModuleFileNameA
CloseHandle
WaitForSingleObject
CreateProcessA
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapCreate
VirtualFree
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FlushFileBuffers

user32

MessageBoxA

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd454b45342bdf7c02c5c5b14c94d6f0

Headers

File Characteristics

Imports

kernel32

user32

setupapi

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 48KB - Virtual size: 47KB