bc7c9a959b8da08e2c3e61e547af5b5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc7c9a959b8da08e2c3e61e547af5b5b
Size

135KB
MD5

bc7c9a959b8da08e2c3e61e547af5b5b
SHA1

53261c07ac044ccb43eafd547bd2c94c04f1e857
SHA256

e37e0d87f4d06eb710bc9ad7c22593987a32e8595c9860de3f4627631fa6e186
SHA512

3428eec824de9692e8ebc35dab041152bc39982fdc3a600be0e687eaea55b7559f7b8c471bf0884d6f6aa5837f731a5b0cf8bc085fff52b0fbad2221307ff6ce
SSDEEP

3072:MqDJpfYcFGde3dtC4AJpP7v/b6+F15e5mWOyhsiT5T3mDKSc0/0F:MqzYcFf/6B7vT958JhsiTF3mDHn0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc7c9a959b8da08e2c3e61e547af5b5b

Files

bc7c9a959b8da08e2c3e61e547af5b5b
.exe windows:1 windows x86 arch:x86

a110531a87e9a90a0f8653b00a50f512

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 122KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE