bcf9cf4d4a85c2fba39b86fdeda5afaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf9cf4d4a85c2fba39b86fdeda5afaf
Size

5KB
MD5

bcf9cf4d4a85c2fba39b86fdeda5afaf
SHA1

45dcd0ce3f2555493a1d16c12702ba54f3e3c4e3
SHA256

53dd18e7eeafddb6536105b11bfe0cb721e514d6135cf8caa9308847cb01c5be
SHA512

403b5e215a0a35efec7e6da4271efe1539fb0700e0d474ccadd67888d49a09353a63feb8debcf41b0b2deb2cfedc82e2bfac21658344574aa6a74f594be96006
SSDEEP

48:adq7gKPqIBRaHAWzSMamPZnVZVwLP1WiIZHIFrJ3x1lFrJ3RiglRByHv2MQGgi:8FKPDRrWRNRnVZEPM3HIFrnFrvRMHui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf9cf4d4a85c2fba39b86fdeda5afaf

Files

bcf9cf4d4a85c2fba39b86fdeda5afaf
.exe windows:4 windows x86 arch:x86

e2b605d25f19bbb4bf5c88aa9d9e7ebe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateEventA
SetEndOfFile
GetModuleHandleA
lstrcatA
GetSystemDirectoryA
WideCharToMultiByte
lstrcatW
lstrcpyW
GetCurrentProcessId
CompareStringA
ExitProcess
GetCommandLineA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot

user32

ShowWindowAsync
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE