bc1dae6d8807534b35e8b8135a2fa4602e2e17191d16fdafe5891b97d698d961 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc1dae6d8807534b35e8b8135a2fa4602e2e17191d16fdafe5891b97d698d961
Size

4.2MB
MD5

534e8c0df9ec2c7b5eaf6fb9b26cd3cc
SHA1

01a725d10af5b7bd3f27e409cbf48e5524417a87
SHA256

bc1dae6d8807534b35e8b8135a2fa4602e2e17191d16fdafe5891b97d698d961
SHA512

c21efeac593022f074f9ec1c36ba55ae6f6bb5023c170209b00c654964c596eeefe561957a5755b5bee2974107cdf6c077a9f09e5ee553f5ea821ac2da961ff4
SSDEEP

98304:Du703604OfVSD1GzgjHndoCOqR9C858u650QI:96efMDxTyCOEd8hG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc1dae6d8807534b35e8b8135a2fa4602e2e17191d16fdafe5891b97d698d961

Files

bc1dae6d8807534b35e8b8135a2fa4602e2e17191d16fdafe5891b97d698d961
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 348KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 416KB - Virtual size: 929KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 28KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ