bc634a4a680de3824ed7db9f82f9b0e3

Sharing

Copy URL Twitter E-mail

General

Target

bc634a4a680de3824ed7db9f82f9b0e3
Size

503KB
MD5

bc634a4a680de3824ed7db9f82f9b0e3
SHA1

40f8ad475ccbf0ade2347ceacfa8bc5d56609a2d
SHA256

2022362db2fbf8915181047153b90844dee366eb0ba015464ece40469acae6c2
SHA512

5790562dc2c93ed2ebfc693d481025d0b626c229e274d5fd0b831d05b49f222a3267691cc8fba24f47d8ab04ce80d0cc019abf2c6bd4f3fb5d3db41bda2585d8
SSDEEP

6144:OsQHREbVSWMoHRzmvb9TkkDgaGzcUZY5BRdurzsNxfN0FNMihHafBphf2GR44A9D:OtHfpoHRiazDZWYwjl62TzQFC8HH/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc634a4a680de3824ed7db9f82f9b0e3

Files

bc634a4a680de3824ed7db9f82f9b0e3
.exe windows:4 windows x86 arch:x86

f82a983564b66def7c7db7d44f929502

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
WriteConsoleA
VirtualFree
CloseHandle
TlsAlloc
LCMapStringA
GetThreadTimes
GetCPInfo
SetStdHandle
TlsFree
GetFileType
HeapDestroy
CreateMutexA
CompareStringW
GetStartupInfoA
HeapFree
InitializeCriticalSection
TlsSetValue
GetDriveTypeW
GetModuleFileNameA
LoadLibraryA
FlushFileBuffers
FreeEnvironmentStringsA
VirtualQuery
GetCurrentThreadId
GetStringTypeW
WideCharToMultiByte
SetHandleCount
SetConsoleTextAttribute
HeapAlloc
GetEnvironmentStrings
IsValidCodePage
GetCommandLineA
GetVersionExA
ReadFile
GetCurrentProcessId
GlobalFlags
GetStringTypeA
GetProfileSectionA
GetEnvironmentStringsW
InterlockedExchange
HeapReAlloc
HeapCreate
FreeEnvironmentStringsW
VirtualProtect
EnumCalendarInfoW
GetLastError
GetTimeFormatA
EnumTimeFormatsW
CompareStringA
SetFilePointer
FileTimeToDosDateTime
GetTickCount
GetLocaleInfoW
QueryPerformanceCounter
EnterCriticalSection
GetTimeZoneInformation
HeapSize
LeaveCriticalSection
RtlUnwind
GetProcAddress
DebugBreak
ExitProcess
VirtualFreeEx
EnumResourceLanguagesA
DeleteCriticalSection
WriteFile
LCMapStringW
GetACP
GetSystemInfo
GetDateFormatA
GetCurrentThread
MultiByteToWideChar
SetLastError
LocalSize
VirtualAlloc
GetCurrentProcess
GetOEMCP
GetLocaleInfoA
UnhandledExceptionFilter
IsValidLocale
EnumSystemLocalesA
DuplicateHandle
TlsGetValue
TerminateProcess
SetEnvironmentVariableA
GetSystemTimeAsFileTime
IsBadWritePtr
GlobalAlloc
OpenMutexA
GetModuleHandleA
GetStdHandle

comdlg32

ChooseColorW
GetOpenFileNameA

wininet

InternetCreateUrlA
DeleteUrlCacheEntryW
InternetConfirmZoneCrossing
FindFirstUrlCacheEntryW
FtpFindFirstFileW
FtpSetCurrentDirectoryW

advapi32

RegSetKeySecurity
CryptExportKey
RegEnumKeyA
DuplicateTokenEx
CryptEnumProvidersW
CryptDestroyKey

comctl32

InitCommonControlsEx

shell32

SHGetPathFromIDListW

user32

SetCaretBlinkTime
CloseWindowStation
wsprintfW
GetDCEx
CreateMenu
GetClipboardOwner
SendDlgItemMessageA
IsMenu
CascadeWindows
FreeDDElParam
RegisterClassA
TranslateMessage
CharPrevA
SetPropA
DestroyIcon
CheckMenuItem
EndDeferWindowPos
LoadImageW
LoadBitmapA
OpenClipboard
NotifyWinEvent
SetCursorPos
RegisterClassExA
CallWindowProcA

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f82a983564b66def7c7db7d44f929502

Headers

File Characteristics

Imports

kernel32

comdlg32

wininet

advapi32

comctl32

shell32

user32

Sections

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 8KB - Virtual size: 27KB

.data Size: 311KB - Virtual size: 310KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 8KB - Virtual size: 27KB

.data
Size: 311KB - Virtual size: 310KB

.rsrc
Size: 5KB - Virtual size: 5KB