BsSend2bt[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

BsSend2bt.exe
Size

33KB
MD5

d7b3e79bed81f611c44c96cc5b7341be
SHA1

56a19e8b68d9e5d874887b19df415ecb5d03213c
SHA256

f23a12f5d1065a4de152ae3a5caf6c33b67e04f64977f424cb19e714b0824793
SHA512

25fc4c28d3abf98610bddd38c6e08f98ecc87caf322aa01507f53667b0a87b2bcc6f303779de88cdf81ca982e0a1b135cca0b73c9eb88a5e48e9e86cb7627d70
SSDEEP

768:SS++vVIY2r1FDdwnj9DdQiOJfmUhFOFeTD:SSL9uQ5OxmCf

Score

1^/10

Malware Config

Signatures

Files

BsSend2bt.exe
.exe windows:5 windows x64 arch:x64

cc8ed40b485fd37cd16ae7bee743769e

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

78:72:21:a2:bf:ff:fa:99:d5:b7:19:fc:91:97:76:f0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18/07/2014, 00:00

Not After

15/09/2017, 23:59

Subject

CN=IVT CORPORATION,O=IVT CORPORATION,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:1e:c6:68:e1:26:a2:ca:0a:5c:d5:ae:41:b6:fe:49:7d:96:79:8a
Signer

Actual PE Digest

e3:1e:c6:68:e1:26:a2:ca:0a:5c:d5:ae:41:b6:fe:49:7d:96:79:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

bssdk

Btsdk_GetRemoteDeviceHandle
Btsdk_IsServerConnected
Btsdk_Done
Btsdk_IsBluetoothReady
Btsdk_Init

bscommon

BsCm_SendFilestoBtDevice
BsCm_SyncSend2btShc
BsCm_GetLangDepResLib
BsCm_ParseDeviceAddressFromString

mfc90u

ord5093
ord3436
ord6425
ord3902
ord6423
ord1553
ord2226
ord2233
ord2470
ord2452
ord2450
ord2468
ord2480
ord2457
ord2473
ord2478
ord2461
ord2463
ord2465
ord2459
ord2475
ord2455
ord949
ord945
ord947
ord943
ord362
ord5365
ord5367
ord6101
ord1635
ord4393
ord4843
ord3494
ord5335
ord4294
ord6421
ord5201
ord1954
ord5284
ord4355
ord1429
ord4048
ord1658
ord1661
ord6053
ord3135
ord1582
ord1713
ord1714
ord2067
ord5013
ord4856
ord4322
ord5314
ord3740
ord4699
ord6027
ord722
ord512
ord1103
ord1080
ord617
ord266
ord2303
ord777
ord1071
ord340
ord604
ord4145
ord4121
ord6422
ord3901
ord6424
ord4438
ord2110
ord2065
ord5713
ord3906
ord1025
ord5230
ord6363
ord5511
ord3932
ord1966
ord3005
ord5356
ord5358
ord4050
ord4687
ord5362
ord5345
ord5696
ord2602
ord2797
ord2904
ord4419
ord2780
ord2907
ord2605
ord2711
ord2598
ord3818
ord3819
ord3809
ord2709
ord4051
ord4596
ord4372
ord3424
ord577
ord265
ord772
ord4658
ord3783
ord3014
ord1389
ord5307
ord2010
ord1699
ord1698
ord1634
ord5332
ord2932
ord4601
ord4373
ord4871
ord3269
ord779
ord938
ord1233

msvcr90

memset
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
_amsg_exit
wcsstr
__argc
__wargv
wcscpy
wcslen
_vswprintf
__CxxFrameHandler3

kernel32

GetFileAttributesW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar

user32

EnableWindow
GetClientRect
IsIconic
SendMessageW
DrawIcon
GetSystemMetrics
LoadStringA
MessageBoxA
MessageBoxW
FindWindowA
SetForegroundWindow
LoadIconW

oleaut32

SysFreeString

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc8ed40b485fd37cd16ae7bee743769e

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

78:72:21:a2:bf:ff:fa:99:d5:b7:19:fc:91:97:76:f0Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

e3:1e:c6:68:e1:26:a2:ca:0a:5c:d5:ae:41:b6:fe:49:7d:96:79:8aSigner

Headers

DLL Characteristics

File Characteristics

Imports

bssdk

bscommon

mfc90u

msvcr90

kernel32

user32

oleaut32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 780B

.rsrc Size: 6KB - Virtual size: 5KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

78:72:21:a2:bf:ff:fa:99:d5:b7:19:fc:91:97:76:f0
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

e3:1e:c6:68:e1:26:a2:ca:0a:5c:d5:ae:41:b6:fe:49:7d:96:79:8a
Signer

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 780B

.rsrc
Size: 6KB - Virtual size: 5KB