mkbitmap[.]exe | Triage

Sharing

General

Target

mkbitmap.exe
Size

35KB
MD5

915bc741a5eec5e068b8c73b199c5dd0
SHA1

d80dc23d16095cc84b9cfb987e7d9c074904131f
SHA256

bc2617f9fc97390941abf0531ed865b7a2bb871ada2767b6a4625140a2be2e90
SHA512

577a5abd51993f23f7889145b9929b0a7665a8b610590bde61d7dfc7d2b2768e98bf2255053b7686f769dd37e8ffbf1827b548a4e8c016e96f5c551ba39ce848
SSDEEP

384:DV2emex8CuUfLxqYDTDPLq5vISjXWgOvHlgOKCZhO1bqZ6fnBBhtlQPv15bxcaLP:tmeFumLREC0qg/ht6n1/9nYBeXXmYeq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mkbitmap.exe

Files

mkbitmap.exe
.exe windows:4 windows x86

88d7a608d5973630ce6901c38a62cb72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fileno
_iob
_onexit
_setmode
abort
atexit
exit
exp
fclose
fgetc
fopen
fprintf
fputc
free
fwrite
getenv
log
malloc
memcpy
memset
signal
sqrt
strcat
strcmp
strcpy
strerror
strlen
strncmp
strrchr
strtod
strtol
ungetc

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 288B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE