bc76cc41746e623febafb3afcd9e900f

General

Target

bc76cc41746e623febafb3afcd9e900f
Size

131KB
MD5

bc76cc41746e623febafb3afcd9e900f
SHA1

05675fb0ea34626d2142666512050f77810688c9
SHA256

9d76a12945d7f5c7223cfe1e01886626f157f1eba9d53e91c5355758dd5948ce
SHA512

e3955123dc306ef07f4a73dfacb6a254ebcaad0686e372b26d54eb9416cee31cef8ac406a16398ff25ca7fa74ff7a3ca0d7ddaf9d0978c0a035320549c7674a4
SSDEEP

3072:ob1yE4Eg7yr8s5vJ4rMe9p/zzg3asySEE9u0wa0nfUVYq:XJO4sjYMe9p/zzg3asyqfX08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc76cc41746e623febafb3afcd9e900f

Files

bc76cc41746e623febafb3afcd9e900f
.exe windows:4 windows x86 arch:x86

0ecd979743df52fc157ebc69799c4e28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
CreateThread
DeleteFileA
FindNextFileA
FlushFileBuffers
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableA
GetFileSize
GetFullPathNameA
GetLastError
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStringTypeA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GlobalHandle
IsBadWritePtr
LoadLibraryA
LoadResource
Module32First
Module32Next
MoveFileExA
MulDiv
OutputDebugStringA
ReadFile
RemoveDirectoryA
ResumeThread
RtlUnwind
SetEnvironmentVariableA
SetErrorMode
SetHandleCount
SetPriorityClass
SetThreadPriority
SuspendThread
UnhandledExceptionFilter
WritePrivateProfileStringA

advapi32

AllocateAndInitializeSid
RegDeleteValueA

Sections

.code
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ecd979743df52fc157ebc69799c4e28

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.code Size: 88KB - Virtual size: 88KB

.data Size: - Virtual size: 504B

.bss Size: - Virtual size: 13KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 6KB - Virtual size: 5KB

.rsrc Size: 34KB - Virtual size: 34KB

.code
Size: 88KB - Virtual size: 88KB

.data
Size: - Virtual size: 504B

.bss
Size: - Virtual size: 13KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 34KB - Virtual size: 34KB