bc8e175314d863fa7afab243f382f354 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8e175314d863fa7afab243f382f354
Size

392KB
MD5

bc8e175314d863fa7afab243f382f354
SHA1

ea3b1e0ee626d018595cc3abf369958be8052a30
SHA256

6f2b62eb004f42423007a80f5758d88731f9e17f323340973ba2bcbdef27b492
SHA512

0b273651e2221c3b5c49e1fe283ef05ab0bd281d5ab6cc2771e42133ed4a25f6921e25d6a921b33f8e19bbd1b8abfcb5f0c6691369a13e1a043f79456a58e4ac
SSDEEP

6144:481wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4DPq:P/ApUvsfRh+ajZCBAMXoUK0VHMq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8e175314d863fa7afab243f382f354

Files

bc8e175314d863fa7afab243f382f354
.exe windows:4 windows x86 arch:x86

ef55f4e6e5a927bf7e495ea0aa15ef9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
HeapCreate
GetModuleHandleA
GlobalFree
LoadLibraryExW
TlsGetValue
CreateMutexA
CreateFileA
GetACP
GetEnvironmentVariableA
GetProcessHeap
FindClose
ExitThread
SetConsoleCursorInfo
UnmapViewOfFile
ReleaseMutex
SetLastError
GetLastError
HeapDestroy
FindResourceA

user32

CallWindowProcA
GetFocus
CopyRect
DefWindowProcW
GetIconInfo
FillRect
GetDC
DrawMenuBar
CheckRadioButton
DrawEdge
DispatchMessageA
IsWindow
GetDlgItem

uxtheme

GetThemeRect
DrawThemeText
DrawThemeIcon
GetThemeSysInt
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ