bfc6972d5193d372e2f800d0ea3515d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfc6972d5193d372e2f800d0ea3515d4
Size

409KB
MD5

bfc6972d5193d372e2f800d0ea3515d4
SHA1

8cdb0049274f574fa8a9fb17bad13ec902c50daf
SHA256

b8ba97caeda1de822ce46bda23ea512b35c57d6717b3d214117fca487596e1bf
SHA512

db43e001dd0adb4a8d815bc5114911c8df9913f23ebb151ef9188f5d1da7242e9f15470413f5d87f45be7d7383f83c1dd7846ad848fb960caa44475b606d368a
SSDEEP

12288:3anssOPGKZ00c2qEfGLzd7cK6JMJWsm2S4OUmPu3CfmGam:3anssOPGKBcRE+fd7wm4Kt3C9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc6972d5193d372e2f800d0ea3515d4

Files

bfc6972d5193d372e2f800d0ea3515d4
.exe windows:4 windows x86 arch:x86

89b82d35a311f8fddc012433135498dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

.text
Size: 24KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE