bc1889cbc622bb9344eb11e9947637937a76a526e094b1c3f493eef13dd584ec

Sharing

Copy URL

Twitter E-mail

General

Target

bc1889cbc622bb9344eb11e9947637937a76a526e094b1c3f493eef13dd584ec
Size

615KB
MD5

9c250696f8b44d5ef24265e9ed4fc6d6
SHA1

bed1c9efeb16b6297727586a379a3db3e55b186e
SHA256

bc1889cbc622bb9344eb11e9947637937a76a526e094b1c3f493eef13dd584ec
SHA512

d4081c74a30ab2d0a51607efe811c8d671d1010b483c4e82e29049e0eeb3fe85787f36895203506acabbdaffa28355e171b501667157d3647cb59bcbd51aa1f3
SSDEEP

6144:7aNco7YgpQJHT64uaIYlWRD+mWaMNEpwq+5sqjcq4cTa+xysqKvmroh1Ks7ZSGwD:2Rp4HT64qL0a3oHJd/B67ln2PAM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc1889cbc622bb9344eb11e9947637937a76a526e094b1c3f493eef13dd584ec

Files

bc1889cbc622bb9344eb11e9947637937a76a526e094b1c3f493eef13dd584ec
.dll windows:6 windows x86 arch:x86

1b3c10fac4d8f33b4d7c828b821db6a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_llseek
_lread
OpenFile
_lclose
CloseHandle
FreeLibrary
GetTempPathA
InitializeCriticalSectionEx
RaiseException
DeleteCriticalSection
SwitchToThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTickCount64
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetFileAttributesW
GetLastError
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualQuery
VirtualProtect
SetEvent
ResetEvent
LeaveCriticalSection
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
EnterCriticalSection
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
InitializeSListHead
GetTempPathW
GetSystemInfo
OutputDebugStringW

user32

GetDC
MessageBoxW
SetRect
RegisterWindowMessageW
SetCursor
AttachThreadInput
ReleaseDC
LoadCursorW

gdi32

GetDeviceCaps

ole32

StgCreateDocfile
OleConvertOLESTREAMToIStorage
OleConvertIStorageToOLESTREAM
StgOpenStorage

oleaut32

SysAllocString

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memcpy
_CxxThrowException
__std_exception_destroy
_except_handler4_common
__std_type_info_destroy_list
memmove
_purecall
__std_terminate
__CxxFrameHandler3
__std_exception_copy
memset

api-ms-win-crt-runtime-l1-1-0

_errno
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

wcscpy_s
_strupr_s
strncpy_s
wcsncmp
_wcsicmp
strncmp
_strnicmp
toupper
strcat_s
strcpy_s
wcscat_s
_stricmp

api-ms-win-crt-stdio-l1-1-0

fread
fseek
ungetc
getc
_wfopen_s
fwrite
_wsopen_s
fclose
feof
fgetc
ftell
__stdio_common_vswprintf_s
_close
_write
_read
__stdio_common_vsprintf_s
fopen_s
_fileno
_filelength

api-ms-win-crt-filesystem-l1-1-0

_wremove
_waccess_s
_unlink
_wmakepath_s
_wsplitpath_s
_splitpath_s

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
_callnewh

api-ms-win-crt-convert-l1-1-0

atol
strtol
atoi

api-ms-win-crt-math-l1-1-0

_libm_sse2_atan_precise

Exports

Exports

DetectFormat
EnumInfo
Export
ExportDirect
Import
ImportDirect
NextInfo
Setup

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b3c10fac4d8f33b4d7c828b821db6a4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 408KB - Virtual size: 407KB

.rdata Size: 57KB - Virtual size: 57KB

.data Size: 48KB - Virtual size: 81KB

.rsrc Size: 76KB - Virtual size: 75KB

.reloc Size: 24KB - Virtual size: 24KB

.text
Size: 408KB - Virtual size: 407KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 48KB - Virtual size: 81KB

.rsrc
Size: 76KB - Virtual size: 75KB

.reloc
Size: 24KB - Virtual size: 24KB