bbc8124a325348f5e9a86ec217fa5be634b4c5bdb8224b420b33012dc2658bb7

Sharing

Copy URL Twitter E-mail

General

Target

bbc8124a325348f5e9a86ec217fa5be634b4c5bdb8224b420b33012dc2658bb7
Size

3.4MB
MD5

0b57e6a14b29bc61781c862f9b6ec296
SHA1

7f937bc5026f655faed6b7b93d5d40d1d0f8e5fe
SHA256

bbc8124a325348f5e9a86ec217fa5be634b4c5bdb8224b420b33012dc2658bb7
SHA512

03bdf2ed65a7b82f07909441ef75940aaf7ffe35418350087aeb8d85dffae5d492f3f9d5ad916b5935bb17e782ac0744b6a33c559793b9faa3378e069937c8fe
SSDEEP

49152:pRaub/c2kT/vgrp9zdIc5fP7e7Vf0EfDQhvhQglYiFqoY2TGm+zA9t:HanTgVN96Jf0EbQhvhQgC0nK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc8124a325348f5e9a86ec217fa5be634b4c5bdb8224b420b33012dc2658bb7

Files

bbc8124a325348f5e9a86ec217fa5be634b4c5bdb8224b420b33012dc2658bb7
.exe windows:6 windows x86 arch:x86

c15ae3ff970820185555838f1581c35f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
AddDllDirectory
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
FindClose
FindFirstFileA
FindNextFileA
GetShortPathNameW
GetTempPathW
CloseHandle
CreateProcessA
GetModuleFileNameA
lstrlenW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess

vcruntime140

memset
memcpy
__current_exception
__current_exception_context
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

fread
_set_fmode
fseek
__p__commode
fwrite
fclose
fopen
__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

realloc
free
_set_new_mode
calloc
malloc

api-ms-win-crt-filesystem-l1-1-0

_rmdir
_stat64i32
_mkdir

api-ms-win-crt-convert-l1-1-0

wcstombs
mbstowcs

api-ms-win-crt-environment-l1-1-0

getenv
_putenv_s

api-ms-win-crt-string-l1-1-0

strcmp
strncpy

api-ms-win-crt-time-l1-1-0

_time64
_localtime64
strftime

api-ms-win-crt-runtime-l1-1-0

terminate
_controlfp_s
_crt_atexit
_seh_filter_exe
_set_app_type
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_register_onexit_function
__p___argc
__p___argv
_cexit
_c_exit
_exit
_initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c15ae3ff970820185555838f1581c35f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 86KB - Virtual size: 86KB

.rdata Size: 162KB - Virtual size: 162KB

.data Size: 5KB - Virtual size: 8KB

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 86KB - Virtual size: 86KB

.rdata
Size: 162KB - Virtual size: 162KB

.data
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 3KB - Virtual size: 3KB