bc8d3325d6e4c7d1e837959247d0dcf92e0d35db2752fda3be2866c5956161dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8d3325d6e4c7d1e837959247d0dcf92e0d35db2752fda3be2866c5956161dc
Size

63KB
MD5

bf4eaca76d70647708569af56afa6732
SHA1

6137e133f62a06aca0a60284e04126f4eea9d74d
SHA256

bc8d3325d6e4c7d1e837959247d0dcf92e0d35db2752fda3be2866c5956161dc
SHA512

b8398db822914490c77f73cc08d4e74634a3064bf11bd1e06fa53cd4cc25b58a5fcbd3ce0de3beb760d90850aedbbdf47381c472eadfc0ee735ee2f75f78ea91
SSDEEP

1536:pU99TrI4ev7fOdpbhSq7q7FLtmmUyyP00ahZ:p2HDev7fg1cqZyy8lhZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8d3325d6e4c7d1e837959247d0dcf92e0d35db2752fda3be2866c5956161dc

Files

bc8d3325d6e4c7d1e837959247d0dcf92e0d35db2752fda3be2866c5956161dc
.exe windows:4 windows x86 arch:x86

4270d5a1995add69631a06d6f899e1f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExA
VerifyVersionInfoA
RegisterWaitForSingleObjectEx
ReadFile
UnregisterConsoleIME
IsProcessCritical
SetCommBreak
GetLargestConsoleWindowSize
ConvertCalDateTimeToSystemTime
IsValidLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE