bc41de4c3a9f9198a140857c52ec963ff15609daf599b158db68f3ae61cd0ab8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc41de4c3a9f9198a140857c52ec963ff15609daf599b158db68f3ae61cd0ab8
Size

3.9MB
MD5

fe3ba823e6ca00614da4f491342fbf8d
SHA1

b864fca4846f029886a03414b31b17c4e73a6cc5
SHA256

bc41de4c3a9f9198a140857c52ec963ff15609daf599b158db68f3ae61cd0ab8
SHA512

ec3898c96f378d7c76fa7305bc2653707acd6f454dab49ead01290e0e6eaefb75a37f9705691cdf3d218d5d676b1b4311ec6b87cbd288bd990afeac2f7e45a81
SSDEEP

98304:nAzJjdHtbi9VZY2Uk+UHSZ76DJWQessorJ1dKG:nAz358U2P+V6DEQesZ1dKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc41de4c3a9f9198a140857c52ec963ff15609daf599b158db68f3ae61cd0ab8

Files

bc41de4c3a9f9198a140857c52ec963ff15609daf599b158db68f3ae61cd0ab8
.exe windows x86

b17067ddccbe4791726551cc7092811b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

IsIconic

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetIcon

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.9MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 992KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ