bc7050a0b19af2e0889fcf0432ce1e838976ce460d8561d89dad27bda5aea17f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc7050a0b19af2e0889fcf0432ce1e838976ce460d8561d89dad27bda5aea17f
Size

36KB
MD5

cfad8b1bce5586442d2897a3d031b5a7
SHA1

fb3599601f181c6aff987938e0272ba1166db132
SHA256

bc7050a0b19af2e0889fcf0432ce1e838976ce460d8561d89dad27bda5aea17f
SHA512

2984a8bf384cc914896b7ddf682082845457312b342ab21b3f3f0fe843a7c582fec2b78d3f0664e1f19b19e1cb6663586ceeafceefc8bd9c98b4ba7641d686bd
SSDEEP

768:c3T1PqM9Of/1nur0AWgfTZvrdtZLlINXp2NZht7o4:oT1P9Q/1nur0UfhrdA2NZht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc7050a0b19af2e0889fcf0432ce1e838976ce460d8561d89dad27bda5aea17f

Files

bc7050a0b19af2e0889fcf0432ce1e838976ce460d8561d89dad27bda5aea17f
.exe windows:4 windows x64 arch:x64

b90a09b684a03f82c4fcac695733b7c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError
CloseHandle
OpenProcess
CreateFileW
DuplicateHandle
GetCurrentProcess
ExitProcess
GetCommandLineW
GetConsoleScreenBufferInfo
GetStdHandle
WriteFile
WriteConsoleW
SetConsoleTextAttribute
OutputDebugStringW
GetConsoleMode
FormatMessageW
GetModuleHandleW
LocalFree
SetLastError
GetFileAttributesW
GetFileSize
GetSystemDirectoryW
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
GetVersion
GetCurrentDirectoryW
GetModuleFileNameW
GetEnvironmentVariableW
FindClose
WideCharToMultiByte
FindFirstFileW
GetFileTime
GetFileInformationByHandle
FindNextFileW
WaitForSingleObject

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ