bcd9ef82bf313aefd149e9c7e4025626 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcd9ef82bf313aefd149e9c7e4025626
Size

221KB
MD5

bcd9ef82bf313aefd149e9c7e4025626
SHA1

791d6837eaff202b8ad1eee5af0dec71738ac23e
SHA256

e3065b333c13dcaf99250c6d7e7f6e2899bb75bfb7b9a2a8d06a985288fe0b75
SHA512

15c75f5a153a43b21d4dc7926983a69aebb8f6db8e4b1242edaa9d482dd9761d84f7f49fd0d2d45e03b4b2f74852a99392f15d4088abc01b9f107eaae5d51316
SSDEEP

6144:2XiKyEjCtfbn0wNH3c790EOpB3PQI9tk+o:KyEjCtf53c790B0Ink+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcd9ef82bf313aefd149e9c7e4025626

Files

bcd9ef82bf313aefd149e9c7e4025626
.exe windows:5 windows x86 arch:x86

2f43e904b8a395d70705a0b389f859ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetACP

user32

FindWindowW
IsWindowEnabled
PeekMessageW
TranslateMessage
EnableWindow
LoadStringA
LoadStringW

crypt32

CertOpenStore
CertCreateCertificateContext
CryptDecodeObject
CertComparePublicKeyInfo
CryptExportPublicKeyInfo
CryptEncodeObject
CryptQueryObject
CertStrToNameW
CryptHashPublicKeyInfo
CryptHashCertificate
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore

odbc32

SQLFreeStmt

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ