bcrypt64[.]exe | Triage

Sharing

General

Target

bcrypt64.exe
Size

13KB
MD5

45af89491e71773b30f0645bfeaf19ef
SHA1

9dd14ae5701da2a7f388dd255dc8917c5eb8630f
SHA256

3fe214642b9fbcd862626373564d931649b0edc4fcdd5ae697134b4a552687df
SHA512

eca61d8b5a6a8a8bb5592ad309b1aa4fb7587e8b92a67203159fca1e15f71d24916e97478eb13a327ac4df5ffd0f7c1e0a113406d124ca77163bc352cec8d345
SSDEEP

384:vUAuvBxy1XsWZXeosjHWUc5tuK5sci3hCI:viM3uJc5tuK5scYhb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcrypt64.exe

Files

bcrypt64.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Mr YKS\Downloads\RegistryHWIDSpoofer-main\RegistryHWIDSpoofer-main\HWIDSpoofer\obj\Release\HWIDSpoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ