bc1b668204511a042b634c05f1151bb8 | Triage

Sharing

General

Target

bc1b668204511a042b634c05f1151bb8
Size

76KB
MD5

bc1b668204511a042b634c05f1151bb8
SHA1

950f93e87e53a5b90e971974422a7f4f8f167f4d
SHA256

27a254c0b8fc9cfa239a5680a2b8f664af9d834f8833028bf27bc8b8f77a8196
SHA512

260dce71de0a1fc28e3a06892d6d5e7a07862dce73d9b2a51982b2c555f2e7ca35a5a7bacb3b9e5f32590a2a24adf3c8d90030587e8acbf8dfc61d85dfa43b4d
SSDEEP

1536:cMaP4XFFTIOec//MPRNQRJB10ohXg7QxXPpjVrs2ryrd1vUQuq6:cMaPWFIOeqMcRJEgXdXPHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc1b668204511a042b634c05f1151bb8

Files

bc1b668204511a042b634c05f1151bb8
.exe windows:4 windows x86 arch:x86

4ee1757707eed75ddb3ddd9961750df9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveVectoredExceptionHandler
GetCommModemStatus
lstrcpynW
Process32Next
RegisterConsoleVDM
RegisterWowExec
UnregisterWaitEx
FindNextFileW
IsDebuggerPresent
DosDateTimeToFileTime
SetErrorMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE