cc6de9a533bcb3ed7b103fa5457b699b

General

Target

cc6de9a533bcb3ed7b103fa5457b699b
Size

24KB
MD5

cc6de9a533bcb3ed7b103fa5457b699b
SHA1

218e031bc988ffc29bed1496f04ed7d13cda78d4
SHA256

e8668a381b2b9bb203196fedcd6d8f87ee9e7385f6ddb9175a45d5bd56027a17
SHA512

de2ddc324d5de769202d12af12ed2aea829399612822c3c8a1c05a2668f304fdeaa5c976befc0502027670ccd4540de439fa91047d8718dc532f0710a894cfcc
SSDEEP

384:HNIMtmQVCrdVepVmNlW6bxN8I6JdKRtf83S8nJvxU23Y5qeICY6HngbyxG8:HCMtbcBop0W6H8ldKbSjnXUo0O+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BmStartApp.exe

Files

cc6de9a533bcb3ed7b103fa5457b699b
.rar
BmStartApp.exe
.exe windows:5 windows x86 arch:x86

42ab97fcafe4fa34a764740da3f652ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
CreateProcessA
CloseHandle
MapViewOfFile
GetLastError
CreateFileMappingA
GetCommandLineA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
HeapFree
CreateFileA
HeapAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
GetConsoleCP
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
HeapSize
SetStdHandle

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
usage.txt

Sharing

General

Malware Config

Signatures

Files

42ab97fcafe4fa34a764740da3f652ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 436B