bcca2668cc5f1819d0827ac357623956 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcca2668cc5f1819d0827ac357623956
Size

1023KB
MD5

bcca2668cc5f1819d0827ac357623956
SHA1

05e1934a151bafc194ece93459fac2f2f4376c5b
SHA256

79e38dad6e1eb2f8acc22e5964c8c64b1151c0758d478f4d4a580a89e8f13c58
SHA512

c6c168dd8c1634f51cc66c4558707e387e4df1e34904f5487f3f083cc911e7de7d835fed7540456c81cd844ce5ded14e97d4ecd96c987661093fb54159c3da4a
SSDEEP

24576:njAHpuepWluyk27/KF9V5Doq5xPOEvYHTNi:nUHoepf27/+9/thvYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcca2668cc5f1819d0827ac357623956

Files

bcca2668cc5f1819d0827ac357623956
.exe windows:4 windows x86 arch:x86

72d159d5d1720556cb3b2ae4b2e2713d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GlobalFree
GlobalAlloc
GetLastError

user32

SetFocus
ShowWindow
ScreenToClient
LoadIconA
MessageBoxA
PostQuitMessage

gdi32

LineTo
SetROP2
GetTextColor
MoveToEx
DeleteObject
GetTextExtentPoint32A
GetTextMetricsA
GetPixel
SelectObject
CreateSolidBrush
CreateFontIndirectA
GetDeviceCaps
GetObjectA
BitBlt
CreateCompatibleDC
SetPixel

Sections

.text
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1016KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ