bc410c52bb0643f29607210c7044a726 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc410c52bb0643f29607210c7044a726
Size

57KB
MD5

bc410c52bb0643f29607210c7044a726
SHA1

445b2aaf64cc93bdfde1241dac611443247b5605
SHA256

d47a5bb0d8c72cdfbf3b4b6e715230ca100f6c08944521952a50ca0cdb55d7f2
SHA512

b6dfef0f1301faef15afc4008121a0c46b422b63b81f14af304089274273471fb186a6a8cbca8ccabacfd87b82b167dfd3d72f52bf3f6da3eaed6fc2417d997a
SSDEEP

1536:SsXNelbyNoSahHSguDJsbhodcDMZOTGkv/HFW3jJWdMYw:nelbyNRahLY6jTGkHIAdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc410c52bb0643f29607210c7044a726

Files

bc410c52bb0643f29607210c7044a726
.exe windows:4 windows x86 arch:x86

272e40c57aad11805884afcc5d4cefd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CreateFileA
GetCurrentThreadId
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

Sections

.code
Size: 512B - Virtual size: 95B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ