bcbe2e8f54421d385d09aacd9907f41a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcbe2e8f54421d385d09aacd9907f41a
Size

194KB
MD5

bcbe2e8f54421d385d09aacd9907f41a
SHA1

f7d7e47328da5f9106415c7889a34dc6d0c70897
SHA256

0a6fe660c6402f477b23f65b120c248aa1e4a457bbb1c281050e20482767afce
SHA512

1350b1543e1a83e0982c75abe8679c3cab698f9802f0c198dd60d3eae6c50dab155acb80ed1857f3835e6b56ab38fd0de062fe9cea6fcf8deae6929fcb34358b
SSDEEP

6144:Pk8IhY6oYw51o/DTNkseHZgYsUG5GYi3PHxp:8M6oYw51obTNksImYYiZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcbe2e8f54421d385d09aacd9907f41a

Files

bcbe2e8f54421d385d09aacd9907f41a
.exe windows:4 windows x86 arch:x86

2def80e33554c9fa7ba605b5986c9ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 36KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 731KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ