bc11db7e9e04bccdee5670c6fccde603 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc11db7e9e04bccdee5670c6fccde603
Size

365KB
MD5

bc11db7e9e04bccdee5670c6fccde603
SHA1

8e9324011f10539a2319b5024dd51a46fe19aa78
SHA256

57eeb23805bf6056bbd4d034dcabe1e67b5743241080b408f9bb512713bb3f31
SHA512

202c63408052ad355b867a97c9efddc7b2a563f83c2cff748da40c2214377a3dae3c9cae6b5cd0b6e1bbd0144ad8ece75249c9690d3d0f21ee2ebc0a2c4b7e52
SSDEEP

6144:xeBOBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmH:xQA5j3CcxR0e7Uc7MOJIP1WGzUdNiCo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc11db7e9e04bccdee5670c6fccde603

Files

bc11db7e9e04bccdee5670c6fccde603
.exe windows:4 windows x86 arch:x86

5eee1eb1f5c5507bf8032c5856b6dfe6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateFileA
GlobalUnlock
LoadLibraryA
CloseHandle
CreateMutexA
CreateProcessA
GetModuleHandleA
GetACP
DeleteAtom
ReleaseMutex
FindResourceA
FindClose
HeapCreate
ExitThread
GetEnvironmentVariableA
PulseEvent
SetLastError
GlobalFree
GetTickCount

user32

FillRect
DispatchMessageA
SetFocus
IsWindow
GetDC
CallWindowProcA
GetIconInfo
CheckRadioButton
DrawEdge
GetDlgItem
DrawMenuBar
DefWindowProcW
CopyRect

msasn1

ASN1BERDecCheck
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ