bc9c79e4ccf6e6d1a69015fc6c5c7127 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc9c79e4ccf6e6d1a69015fc6c5c7127
Size

83KB
MD5

bc9c79e4ccf6e6d1a69015fc6c5c7127
SHA1

a880e642a9ed99496a3808905a7ed4d91f0c5c15
SHA256

81d0491646ae45de1be8d8881ef458e7d8ad1a19b34355c9ee11ab2874276f07
SHA512

38c03363e8466895cf1da8cdeccf5374e0ebbe42d50b538e4c71fa8b4c666ddd6bde4040c81fd5c60ca1af92e1245f79f57b7fcd9c2b508f35681089c5f08486
SSDEEP

1536:l+3AwTZOUxHfokQS8IjPDfT+F0i6xo4RSCjEErxTWDTMqhGKYIZTET8bDQ:l+Qw8UxWS8o3NSCjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9c79e4ccf6e6d1a69015fc6c5c7127

Files

bc9c79e4ccf6e6d1a69015fc6c5c7127
.exe windows:4 windows x86 arch:x86

c081702079c43934ae3d373250511938

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleContext
IsBadStringPtrW
CreateVirtualBuffer
NlsGetCacheUpdateCount
CreateWaitableTimerW
PeekConsoleInputA
SetPriorityClass
GetConsoleCursorInfo
GetConsoleAliasesLengthA
ProcessIdToSessionId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE