bc71807527dcf86fb38ab5bfe9561327 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc71807527dcf86fb38ab5bfe9561327
Size

48KB
MD5

bc71807527dcf86fb38ab5bfe9561327
SHA1

51ab79c4433df262c5d9b229906589678e812035
SHA256

d2be6d2fc13f2a14e45673d7ce51d64d495bd6dd1970284fe1321a6e69a768fb
SHA512

92ccde35ae447ac030f827c5e1643cd9dc39da74271d2b2669754e876e4aef2c486a3fb82f26e5782a60133aef9cd926bc4fec5ed24618e21eeea9d92226783b
SSDEEP

1536:QFN1L2VAMWM6D5nJCIN6EB2iIYDmH2ctBPmneVS:YN1L0g1JCIRJCBBPmn/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc71807527dcf86fb38ab5bfe9561327

Files

bc71807527dcf86fb38ab5bfe9561327
.exe windows:5 windows x86 arch:x86

2ddf9d34e78478dc3d854cb853690991

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam

kernel32

GlobalLock

shlwapi

PathCombineW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfA

user32

CharLowerBuffA
DispatchMessageA
GetClipboardData
GetDlgItemTextA
GetIconInfo
GetKeyState
GetMessageA
GetWindowTextA
OpenDesktopA
PeekMessageA
SetThreadDesktop
ToUnicode

Sections

.dup
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bgd
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xef
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ