bc0cc900b282515b4f00292519de60d4 | Triage

Sharing

General

Target

bc0cc900b282515b4f00292519de60d4
Size

242KB
MD5

bc0cc900b282515b4f00292519de60d4
SHA1

5cfda1995ff41813c3b4132bad151c0c592dba3b
SHA256

48eb8d9c064fd5db379325f37a86c927bc8880d736b1ac10ab4a53a448157d89
SHA512

104657c2c96110ee0d04d242ce3a6edfd3d3fa00db3435cee6326be424c69c31d85d6c8ebef476ed117cd1dfbb343bf2eea2c672571d12473b72643690ab167b
SSDEEP

3072:lT/aaUF7JjCqyWFDUX9Yk2YMsLICMB61BDWY4t4OIvWcg/9l:INeEDtk2gLpj1IY4t4OI+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

bc0cc900b282515b4f00292519de60d4

Files

bc0cc900b282515b4f00292519de60d4
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

CmzomsgprrzgpOesotinpckimb
DllRegisterServer
DllUnregisterServer
RdgccYstojDavvbrvc
ResumeServer
StartServer
StartW
StopServer
SuspendServer
UnhafgAzanisWypnvwjzkkg

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ