0675a42f744d8a7acfbb4772bcb148f1d7a5b42bd3765334784fc642587ed4e7

Sharing

Copy URL Twitter E-mail

General

Target

0675a42f744d8a7acfbb4772bcb148f1d7a5b42bd3765334784fc642587ed4e7
Size

176KB
MD5

d199dda540667b41262d43ec54177eca
SHA1

3e6d4f43723cd65b1524aac2a51fc2a57cf2be71
SHA256

0675a42f744d8a7acfbb4772bcb148f1d7a5b42bd3765334784fc642587ed4e7
SHA512

2bd68fe8366392efc1582fe50f805029a74d99112d22ada3af05210ad0dfdea0883fcb212d658873f048c03942d46e2ec9be06bd4e941b0e670773912651dc29
SSDEEP

3072:7VQYt++d22UoBhcf291tTcMxSsZYIqRFRVSyoYrjH2V/++d22UoBhcf291tTcMxR:BQY8+d22UoBhcf291tTcMKIduB+d22Uf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0675a42f744d8a7acfbb4772bcb148f1d7a5b42bd3765334784fc642587ed4e7

Files

0675a42f744d8a7acfbb4772bcb148f1d7a5b42bd3765334784fc642587ed4e7
.exe windows:6 windows x86 arch:x86

0037c5ca03397f988043473231709c17

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\macrosystem\Bogart\Release\Bogart.pdb

Imports

logger

loggerShutdown
loggerStartup

secasa2

mainSetRestartBogart
mainGetRestartBogart
mainRun

kernel32

QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetLocaleInfoEx
GetLastError
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
ReleaseMutex
CloseHandle
EncodePointer

user32

MessageBoxA
GetDesktopWindow

shell32

ShellExecuteA

ole32

CoInitializeEx
CoUninitialize

msvcp110

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z

msvcr110

_invoke_watson
_controlfp_s
_CxxThrowException
__CxxFrameHandler3
memcpy
__dllonexit
__crtSetUnhandledExceptionFilter
memmove
tolower
_purecall
??3@YAXPAX@Z
getenv
_stat64i32
??2@YAPAXI@Z
_lock
_unlock
_calloc_crt
memset
_onexit
??1type_info@@UAE@XZ
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
?terminate@@YAXXZ

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0037c5ca03397f988043473231709c17

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

logger

secasa2

kernel32

user32

shell32

ole32

msvcp110

msvcr110

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 163KB - Virtual size: 162KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 163KB - Virtual size: 162KB

.reloc
Size: 2KB - Virtual size: 1KB