ByteCodeGenerator[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ByteCodeGenerator.exe
Size

41KB
MD5

b86a729f335afe767e625604dd5b7770
SHA1

d07873775ef7be7a27053f8495400e9fe7688a65
SHA256

7f0e550497d89eceb66b64301f1a55bbfe9fb12d83086ffc34fd83f964dc1c57
SHA512

c1c10af53f6b8ab3110d57dadc67c7253f27dd5c8d0ee1c94141bf814647fd7308c48cd3aecc43f106eef919d24d4f8054d8783424f752cc9988204725223412
SSDEEP

768:E8ngGO58RGtEEHz8HiQ6rpum+ws7OR+2/wW7RUC+uhQpPpkSVh:E8nO58IuuzuZrVV673+GQVpkSVh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ByteCodeGenerator.exe

Files

ByteCodeGenerator.exe
.exe windows x86

9c3d6bd0daeb822b3912cfea82ada4f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcmp
__dllonexit
_onexit
memcpy
_lock
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_initterm
__setusermatherr
__p__fmode
_cexit
memset
memcpy_s
_exit
__set_app_type
__wgetmainargs
_amsg_exit
_unlock
__p__commode
_XcptFilter
_vsnwprintf_s
_purecall
exit

ntdll

NtQueryInformationThread
NtSetInformationThread
NtQuerySystemInformation
RtlReportException
RtlFreeUnicodeString
RtlConvertSidToUnicodeString
RtlFreeHeap
RtlReAllocateHeap
RtlAllocateHeap
RtlDeleteElementGenericTableAvl
RtlInitializeGenericTableAvl
RtlNumberGenericTableElementsAvl
RtlInsertElementGenericTableAvl
RtlEnumerateGenericTableWithoutSplayingAvl
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlEnumerateGenericTableAvl

urlmon

CreateUri
CoInternetParseIUri

api-ms-win-security-base-l1-2-0

RevertToSelf
ImpersonateLoggedOnUser
GetTokenInformation

rpcrt4

RpcEpRegisterW
RpcServerUseProtseqEpW
RpcObjectSetType
RpcServerListen
UuidFromStringW
RpcServerInqBindings
RpcBindingVectorFree
RpcMgmtStopServerListening
RpcServerUnregisterIf
NdrServerCall2
RpcServerRegisterIf3

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegQueryValueExW
RegGetValueW
RegOpenKeyExW

api-ms-win-core-processthreads-l1-1-2

OpenThreadToken
GetCurrentThread
OpenProcessToken
GetCurrentThreadId
ExitProcess
GetCurrentProcess
GetCurrentProcessId
TerminateProcess

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-com-l1-1-1

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx

api-ms-win-eventing-provider-l1-1-0

EventWrite
EventUnregister
EventRegister

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
RegisterTraceGuidsW
TraceMessage

api-ms-win-core-localization-l1-2-1

FormatMessageW

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetLastError
SetLastError

api-ms-win-core-file-l1-2-1

SetFilePointer
GetFileSizeEx
GetFileAttributesExW
CreateFileW
WriteFile
SetEndOfFile

api-ms-win-core-debug-l1-1-1

OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-synch-l1-2-0

Sleep
WaitForSingleObject
WaitForSingleObjectEx
CreateMutexExW
ReleaseSemaphore
ReleaseMutex
OpenSemaphoreW
CreateSemaphoreExW

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleA
GetModuleFileNameA
GetModuleHandleExW
FreeLibrary
LoadLibraryExW
GetProcAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetSystemTimeAsFileTime
GetTickCount

oleaut32

SysFreeString

api-ms-win-core-memory-l1-1-2

UnmapViewOfFile
CreateFileMappingW
MapViewOfFile

api-ms-win-core-string-l1-1-0

CompareStringEx
CompareStringOrdinal

api-ms-win-core-heap-l1-2-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-io-l1-1-1

DeviceIoControl

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c3d6bd0daeb822b3912cfea82ada4f3

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

urlmon

api-ms-win-security-base-l1-2-0

rpcrt4

api-ms-win-core-registry-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-security-sddl-l1-1-0

api-ms-win-core-com-l1-1-1

api-ms-win-eventing-provider-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-core-localization-l1-2-1

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-file-l1-2-1

api-ms-win-core-debug-l1-1-1

api-ms-win-core-handle-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

oleaut32

api-ms-win-core-memory-l1-1-2

api-ms-win-core-string-l1-1-0

api-ms-win-core-heap-l1-2-0

api-ms-win-core-io-l1-1-1

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB