BitKiller[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

BitKiller.exe
Size

44KB
MD5

9c9ccd2347a77568472a3f15946ba2fb
SHA1

ac062158831851bc547e401405b0dacd9a421cbc
SHA256

5201eda9da6d7eae30a7a41ab2ec51ab84efd007d1c1b02d589b1c5a3ffe893a
SHA512

bcb88b312556d7ac0c5cd3654dd982d7007d8fc245834412b3a132d31611c12a04360a36cb716a4ac842d11318fbae5e3000b143e3f10de9b72b573d1b289634
SSDEEP

768:vAbExbi4+Hutqs2a+NRarrk3EtAh+p5COW9IpmxbdagCl5K:vZs4uu0s/yIXuTh+p5COW9Ipmxbd85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BitKiller.exe

Files

BitKiller.exe
.exe windows:6 windows x86 arch:x86

Password: 54016Loke!?

481ef4023efc3ef4f5d6a9cad4df8668

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Hasan\BitKiller\BitKiller2.0\source\BitKiller 2.0\Release\BitKiller.pdb

Imports

comctl32

InitCommonControlsEx

kernel32

CreateFileW
GetFileSizeEx
CloseHandle
FindFirstFileW
GetLastError
FindNextFileW
FindClose
GetFileAttributesW
ReleaseMutex
WaitForSingleObject
SetFileAttributesW
SetFilePointer
SetEndOfFile
DeleteFileW
RemoveDirectoryW
WriteFile
GetModuleHandleW
CreateMutexW
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer

user32

IsDlgButtonChecked
SendMessageW
LoadIconW
SetDlgItemTextW
KillTimer
SetTimer
EndDialog
DialogBoxParamW
MessageBoxW
SendDlgItemMessageW
GetDlgItem
CheckRadioButton

comdlg32

GetOpenFileNameW

shell32

SHGetPathFromIDListW
DragQueryFileW
DragFinish
SHBrowseForFolderW

ole32

CoInitialize
CoUninitialize
CoTaskMemFree

msvcp120

?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ

msvcr120

_except_handler4_common
__crtTerminateProcess
?terminate@@YAXXZ
_crt_debugger_hook
_commode
_fmode
__crtSetUnhandledExceptionFilter
memcpy
__CxxFrameHandler3
_invoke_watson
_controlfp_s
__crtUnhandledException
_CxxThrowException
_time64
srand
wcsrchr
_swprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
memmove
_wfopen
fwprintf
fclose
_beginthread
rand
_wrename
_wcserror
_errno
_purecall
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
memset

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 54016Loke!?

481ef4023efc3ef4f5d6a9cad4df8668

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

comdlg32

shell32

ole32

msvcp120

msvcr120

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 1KB - Virtual size: 1KB