bc0ea32000a1f355c2691c664ad40e58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc0ea32000a1f355c2691c664ad40e58
Size

1.5MB
MD5

bc0ea32000a1f355c2691c664ad40e58
SHA1

0a078f90b41c8874c638daf37e79fc786e60c1fe
SHA256

282623476f34495a3c2fc6161825292ff2df3147e2b7f947920e9881fb508d05
SHA512

6a98c484480ebf0983eb0d87b8982b8557588b35d8ea4ce556b597de3e39f077a57639986d5d4914ef29491fbab045ca9afc8ba6259f4e68f0ab87acd8d67b50
SSDEEP

12288:8AwSfxL/2Dc3jDLLmt0LDQewsAjRSCwBZtpQc0dfo+03/DipmyAqOm5yOvei3D5O:haewsAjQCww5fL0vXyA5SxzfadB3I2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc0ea32000a1f355c2691c664ad40e58

Files

bc0ea32000a1f355c2691c664ad40e58
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\setlang.pdb

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ