bbc8c019b5a6a2318ecc4f83854da1b4

General

Target

bbc8c019b5a6a2318ecc4f83854da1b4
Size

284KB
MD5

bbc8c019b5a6a2318ecc4f83854da1b4
SHA1

ec7e0bbfcae6380487aef4ef72f82f97c7a610b1
SHA256

21f8173b7a7b267b18f2a964dd242de9076444d8c4479c0a5e871c9da7350e2f
SHA512

ef6e0790c3e87d9dd13fb119dfd2ea30c37e08763360a81c2ddb9e6922d26c87163b8b65f16bd326401636d0e1237f98dc488eebd44c100ef0fd2a7ddbb5f084
SSDEEP

6144:vwrL3AeSG4xyuF0f2t6b+vClRHUcivtJOkRGP07ByaB22U9F/s:vwX3AeSG48uFZt6KqlKRvtJOkRGmwtk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc8c019b5a6a2318ecc4f83854da1b4

Files

bbc8c019b5a6a2318ecc4f83854da1b4
.exe windows:4 windows x86 arch:x86

726ed82a51c581991048d24fda891dcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
VirtualAlloc
GetTickCount
ResetEvent
VirtualFree
GetProcAddress
FlushFileBuffers
SetStdHandle
SetFilePointer
GetLocaleInfoA
VirtualQuery
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
CloseHandle

user32

PeekMessageA
SetActiveWindow
FindWindowA
TranslateMessage

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 216KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

726ed82a51c581991048d24fda891dcf

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 7KB

.gdata Size: 216KB - Virtual size: 1.9MB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 7KB

.gdata
Size: 216KB - Virtual size: 1.9MB

.rsrc
Size: 8KB - Virtual size: 7KB