bc54a4e80a63ebaccf379c0ccf3bbb5abddaddf7cb86cf8ab4f0d5ad4964b6bd

Sharing

Copy URL Twitter E-mail

General

Target

bc54a4e80a63ebaccf379c0ccf3bbb5abddaddf7cb86cf8ab4f0d5ad4964b6bd
Size

40KB
MD5

d5f2f783c57bdb17471116706164e63b
SHA1

89990c493800ae89ed8a2498d70647eb2ed78a76
SHA256

bc54a4e80a63ebaccf379c0ccf3bbb5abddaddf7cb86cf8ab4f0d5ad4964b6bd
SHA512

36ada2e7919e19156af2a15d84e20e1d243dc5b08276aee55bc3a3a1ad5689bdfdac5b6d8dba0a83afc624a49d9ef7fc2cdc469f1d1daef09dbfa28486e8b053
SSDEEP

768:izlTD2PmCj1zSsTvM0mHvHvi6SDu8xS9dESBq9pjSIlMSbqFCQ0MbWP:glH2uChdvPwvHvi6SDuFsRBSIOSmF10z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc54a4e80a63ebaccf379c0ccf3bbb5abddaddf7cb86cf8ab4f0d5ad4964b6bd

Files

bc54a4e80a63ebaccf379c0ccf3bbb5abddaddf7cb86cf8ab4f0d5ad4964b6bd
.exe windows:5 windows x86 arch:x86

7a5b0e460faa058faaff468d7e3590d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetLastError
ReadFile
Beep
ReadConsoleW
PeekConsoleInputW
WaitForSingleObject
GetTickCount
SetConsoleCtrlHandler
FlushConsoleInputBuffer
SetConsoleMode
GetConsoleMode
GetStdHandle
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleFileNameW
GetConsoleOutputCP
ExitProcess
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
HeapReAlloc
HeapFree
WriteConsoleW
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
CompareStringA
GetThreadLocale
CompareStringW
lstrlenW
lstrlenA
GetFileType
VerifyVersionInfoW
FormatMessageW
LocalFree

user32

LoadStringW
CharUpperW
CharUpperBuffW
CharNextW

ws2_32

WSACleanup

shlwapi

StrStrIW
StrChrW
StrChrIW
StrStrW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

msvcrt

_initterm
__wgetmainargs
__winitenv
_get_osfhandle
wcstol
_controlfp
exit
wcschr
_iob
_vsnwprintf
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_cexit
_XcptFilter
_exit
_c_exit
fprintf
_errno
__setusermatherr
fflush
wcstoul
wcstod
_fileno
_except_handler3

ntdll

VerSetConditionMask

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a5b0e460faa058faaff468d7e3590d4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

shlwapi

version

msvcrt

ntdll

Sections

.text Size: 22KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 376B

.rsrc Size: 16KB - Virtual size: 80KB

.text
Size: 22KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 376B

.rsrc
Size: 16KB - Virtual size: 80KB