bc5192e63efd104588769e73c65d346bc3fe7e9b120ec08f1432bc540f3de302

Sharing

Copy URL

Twitter E-mail

General

Target

bc5192e63efd104588769e73c65d346bc3fe7e9b120ec08f1432bc540f3de302
Size

1.1MB
MD5

4ead3b8c017f8ab8e3d95fb51bb254e0
SHA1

f97d54893539f5c2cbcd3a9421e0f29cc0f7145e
SHA256

bc5192e63efd104588769e73c65d346bc3fe7e9b120ec08f1432bc540f3de302
SHA512

632c2a14e0333b300dfb527323db84d3a9b2f1f0c59c7614085b98554d128b48ca0706e911db396a487ca02c0cf00c35ee9293b56a42232c4e4905c3a54f2cc3
SSDEEP

24576:Up2aSUFaUFDh0dvZ7am9v/WtqBWhcydsF:1BZvx9vOtDhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc5192e63efd104588769e73c65d346bc3fe7e9b120ec08f1432bc540f3de302

Files

bc5192e63efd104588769e73c65d346bc3fe7e9b120ec08f1432bc540f3de302
.dll windows:4 windows x86 arch:x86

d021899b2d32136537bd09e79dc1badf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_setjmp3
sprintf
exit
longjmp

kernel32

DisableThreadLibraryCalls
FreeLibrary
InterlockedExchange
LocalAlloc
LocalFree
LoadLibraryA
Sleep
GetCommandLineA
GetModuleHandleA
GetLastError
GetProcAddress

user32

MessageBoxA
CharUpperA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

AGEMOD
AUCGET
AUDGET
BSIO
BTRV0CLOSE
CENTER
CNVDAT
CNVTIM
CODGET
CODLOD
CTNGET
CXFGET
CXNGET
DBDCLO
DBDGET
DBDOPN
DIVMOD
DOMGET
DOMOPN
EDTDAT
ENTARR
ENTFMT
ENTFMT2
ENTREAD
ENTSETUP
ESDSFH
EXTFHSUB
FDRLOD
FGCGET
FGRGET
FHREDIR
FHR_CLOSE
FILGET
FILSET
FLCGET
FLDGET
FLTACD
FLTFND
FLTGET
FMCMOD
FMTFLD
FMTFLD2
FMTNUM
FXRGET
HOLGET
IDXGET
INHMOD
INSGET
IOCLNT
IOMOD
MAPPER
MFBSTOP
MFFH
MFINI
SEQMOD
STRIPE_CLOSE_FILE
STRIPE_CONFIG_INFO
STRIPE_COPY_FILE
STRIPE_CREATE_FILE
STRIPE_DELETE_FILE
STRIPE_FLUSH_FILE
STRIPE_FREE_RECORD_LOCK
STRIPE_GET_RECORD_LOCK
STRIPE_INITIALIZE
STRIPE_LOCKFILE
STRIPE_OPEN_FILE
STRIPE_READ_FILE
STRIPE_RELSEMA
STRIPE_RENAME_FILE
STRIPE_SEEK_END
STRIPE_SETSEMA
STRIPE_TEST_RECORD_LOCK
STRIPE_UNLFILE
STRIPE_UNLOCK
STRIPE_WRITE_FILE
SUSRD132
UP2MOD
UPPMOD
X2B_STATUS
XFH2BTR
XFH_CLOSE
XFH_CLOSE_MAPPER
XFH_CLOSE_MVS
XFH_FUNC
XFH_INITIALISE
_BTRV
_mFdllinfo

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d021899b2d32136537bd09e79dc1badf

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 1.6MB

.idata Size: 1024B - Virtual size: 726B

Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 568B

.reloc Size: 27KB - Virtual size: 26KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 1.6MB

.idata
Size: 1024B - Virtual size: 726B

.rsrc
Size: 1024B - Virtual size: 568B

.reloc
Size: 27KB - Virtual size: 26KB