bc97dc2ee02e81313e637ebcd8b8408d70005e15b5898331051d481f6813f212 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc97dc2ee02e81313e637ebcd8b8408d70005e15b5898331051d481f6813f212
Size

41KB
MD5

c052c99637ed56e63798f6c830e36cb4
SHA1

1a77cfc945b8aaadda9a20ea9ff5089bc3139c5f
SHA256

bc97dc2ee02e81313e637ebcd8b8408d70005e15b5898331051d481f6813f212
SHA512

eb4e4ee26c16635b420bb8e0eab184803fd9bd2f4709c5258a4215233f1f790fdd65428bf3284e14738576f97274afd69f3e8e03dd017df4f421038c08792bf2
SSDEEP

384:H0NqwaXklRRvZxMR5QYKZseH5eAXZkbXSm10cz2TFUaMPbaDqcRM+ll4uPk:H0NqwbTzQDKVeA2bhpaPDqcRkwk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc97dc2ee02e81313e637ebcd8b8408d70005e15b5898331051d481f6813f212

Files

bc97dc2ee02e81313e637ebcd8b8408d70005e15b5898331051d481f6813f212
.exe windows:5 windows x86 arch:x86

f08fb13efbf8ba797507962ac13ecc2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

gdi32

CreateDCA
GetWindowOrgEx
SetWindowOrgEx

kernel32

GetModuleHandleW
GetProcAddress
ExitProcess

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ