bc6b132902665467472b9716308db30a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc6b132902665467472b9716308db30a
Size

84KB
MD5

bc6b132902665467472b9716308db30a
SHA1

4a537b2967e261a0f047354e3a222cf785b34bce
SHA256

2e1c62f4382953a5f4653e34184126621324f91b378377c20c3d8909ea9d7a02
SHA512

187492c6413df914d55e00809ce0b2cffd6ee69ecb567243b04228b0175da0f1191e53baa388c891e88101572939306f67f32ec1c4932c3ce3c5290374d0abc7
SSDEEP

1536:EDBcc9Ftfzx1zFEwMSDVnXckuVqDDTc2I6SmAQEkC3ZHVlvwV5h8FEW5ZGqfI:gScXtfztpM4VnqoUBmXEkC3ZHVlvw3aq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc6b132902665467472b9716308db30a

Files

bc6b132902665467472b9716308db30a
.exe windows:4 windows x86 arch:x86

5c9825bf9c3af2e946618a528b25d5da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

shell32

ShellExecuteA

Sections

.text
Size: 81KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE