bc355f3dfbd3980b787489dd58ff6ef4 | Triage

Sharing

General

Target

bc355f3dfbd3980b787489dd58ff6ef4
Size

24KB
MD5

bc355f3dfbd3980b787489dd58ff6ef4
SHA1

8246781c8646f56b71c14a582aac6d0456a66344
SHA256

75ea5606dec59c03c9a752d2c5de96bf1cfa60dae4d3c66627b1164fdcd557dc
SHA512

d9e6b61f7c3a622c3a5a22eea92dd0f1f36181fdc55b0816cdda9ad9e37a5679c0fd1db4d15005fdb884c487894af0c68ce509ec525398b37587c18228f5cde2
SSDEEP

384:uL3RVlKAayg+bE5c+hhk5ar7V9n8TOqUz6sLIoKkGw:uL3RV4AaD+bE5cdaPfn2bUz6d9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc355f3dfbd3980b787489dd58ff6ef4

Files

bc355f3dfbd3980b787489dd58ff6ef4
.exe windows:4 windows x86 arch:x86

5ede0d96a67e2e425bf048e9cece10d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleA
GetCurrentProcess
VirtualProtect
GetModuleFileNameW
DeleteCriticalSection
CreateFileW
GetCurrentThreadId
CloseHandle
GetModuleFileNameA
GetCurrentProcessId
CreateThread
GetLastError
GetProcAddress
GetModuleHandleW
EnterCriticalSection
DisableThreadLibraryCalls
LoadLibraryA
ExitProcess
CreateEventW

advapi32

AreAllAccessesGranted

shlwapi

StrChrA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ