bacc58b433c7fcfaf1ec2ba5bd2c0d52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bacc58b433c7fcfaf1ec2ba5bd2c0d52
Size

14KB
MD5

bacc58b433c7fcfaf1ec2ba5bd2c0d52
SHA1

f587924c54f1721cc6711e127a3a2596ada2f52f
SHA256

4091631dab16b3a07995d40ceff65af8b3edf419b73b0b5a1905e4a83591476b
SHA512

adae56089492d734896335669881779450fc673e9422035587c7a8b4118760f3c6d078d437997d1474b379905d989e52511cf1d028d11a9bf4b7dc1f93a22d8a
SSDEEP

192:3c1zCsP0Y8P1OqoP61ynn+FXVDbj5DiG8cQkWTMKgH8vtXGaJppM2ftxvY8:3ahX8Pwqoy1yn+3oG8D7jV24oAtpY8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bacc58b433c7fcfaf1ec2ba5bd2c0d52

Files

bacc58b433c7fcfaf1ec2ba5bd2c0d52
.dll windows:4 windows x86 arch:x86

ba3f00b8fb2db348fe9beabf8cd50760

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
GetFileSize
CreateFileA
GetProcAddress
CreateEventA
OpenEventA
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
SetEvent
SetFilePointer
HeapAlloc
GetProcessHeap
VirtualProtect
CloseHandle
GetModuleHandleA
LoadLibraryW
MultiByteToWideChar
LoadLibraryA
CreateThread
Sleep
ExitProcess

user32

SetWindowsHookExA
CallNextHookEx
wvsprintfA
wsprintfA
BroadcastSystemMessageA

msvcrt

strrchr
_strcmpi
_adjust_fdiv
free
sprintf
strlen
strcpy
strcat
strncpy
strchr
strstr
memset
malloc
strcmp
memcpy
_except_handler3
realloc
_strlwr
_initterm

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ