bc4b4c670ca228c2bf721a6937508a32 | Triage

Sharing

General

Target

bc4b4c670ca228c2bf721a6937508a32
Size

93KB
MD5

bc4b4c670ca228c2bf721a6937508a32
SHA1

71b16d3ee894c813a7255be3b8706434b3cf17f6
SHA256

159535b210161897c7d7f2d0c7b9854d3691d12b161cff0a07a159f3ff19468d
SHA512

65024372c8059518a4912866fbeb5df5d799f79324d42aded5783c7195a7119c437affc2701ac725f95acb3c1389b8a00f91de138af58477db2fbe073a643fb6
SSDEEP

1536:pJhZDMijwmrl9qclu7tR6UMIth7hf9Gp7UxnrCezyGNVkPGzehYE4FplHppfFO:VZw4HZu7tbd7VGp7UeeG1Es8tJBFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc4b4c670ca228c2bf721a6937508a32

Files

bc4b4c670ca228c2bf721a6937508a32
.dll windows:4 windows x86 arch:x86

ee6f83f16c8e4cba8f886ef6dbef2590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW

kernel32

InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue

advapi32

RegSetValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ