bbcc7be72e6f957e45d76398e95a2aaf

General

Target

bbcc7be72e6f957e45d76398e95a2aaf
Size

32KB
MD5

bbcc7be72e6f957e45d76398e95a2aaf
SHA1

b53e1250c98b4926080fde678a046a6b90c9edae
SHA256

2c49911daff2baa45654c6857564788e15c6415ba906f2d915a34546abe35210
SHA512

bbe7f10a8d33e578e43401b38d264b1d8d2ef13acc345f7f3219b9d38fb1fcc0777b6d2f739e2dd0f7ff520a77834be2cc6dea22c547e90fd0021d618a0332b9
SSDEEP

384:ljTW+vLOx/92t3Nz4AskJbQCmvMBd1VPpTh1XEEEl4KZNi/IQOrVLd:ljTTLk4sHkJkhgHPpT/UEmpK/ILhR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbcc7be72e6f957e45d76398e95a2aaf

Files

bbcc7be72e6f957e45d76398e95a2aaf
.dll windows:4 windows x86 arch:x86

08e5bc541d392c132cc3d84ad86ca14d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
GetCurrentThreadId
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
GetFileSize
ReadFile
VirtualProtectEx
GlobalFree
GetCurrentProcess
SetThreadPriority
IsBadReadPtr
GlobalUnlock
VirtualAlloc
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
ExitProcess
WinExec
GetTempPathA
TerminateProcess
GetPrivateProfileStringA
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
ReadProcessMemory
CloseHandle

user32

UnhookWindowsHookEx
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState
CallNextHookEx
SetWindowsHookExA

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

urlmon

URLDownloadToFileA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08e5bc541d392c132cc3d84ad86ca14d

Headers

File Characteristics

Imports

kernel32

user32

wininet

urlmon

advapi32

Sections

.text Size: 29KB - Virtual size: 28KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 2KB - Virtual size: 1KB