bcc37039bc8ac3d0d0a4a6d98659ccf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcc37039bc8ac3d0d0a4a6d98659ccf6
Size

85KB
MD5

bcc37039bc8ac3d0d0a4a6d98659ccf6
SHA1

e4c43f83ffa62f68954c59905ff78b778dc47f17
SHA256

71f23551d047b8404778fa726478c54c9b16ce74ea129a9bd9ec578142676f52
SHA512

42bae71a973bba0b1d46a5ed293bcd6fbf5ab8c5aff342fb620c43520f39403c844430501b9ba17980a2ed36b4d606ae9feb6094e8fc322b9099183f0f70a556
SSDEEP

1536:4NXZ3I9hJgdG+yYiJKJViNRkiygdR5tvV51E2n:Q3IXGYKiRHygXjr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcc37039bc8ac3d0d0a4a6d98659ccf6

Files

bcc37039bc8ac3d0d0a4a6d98659ccf6
.exe windows:5 windows x86 arch:x86

fffd9566f06cae802a77a95301407935

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
Sleep
EnterCriticalSection
SetUnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ