bc812a92ebd67a534ae80684d69b5944f1311ac4233fd78de85fd5106cbb5a48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc812a92ebd67a534ae80684d69b5944f1311ac4233fd78de85fd5106cbb5a48
Size

31KB
MD5

d0ef7d21a35b4f84dacfbbf7326c1968
SHA1

c9b7e3144d0a71ffe567e1079b6be00eab35fd95
SHA256

bc812a92ebd67a534ae80684d69b5944f1311ac4233fd78de85fd5106cbb5a48
SHA512

657b4669ea474331fdfe2c8dd3c9d0fa9662ca92cc43b54ce0cfe560a1aaee89b1981bbb9bce0223c1db44346b0fa8cf8d25031ca2b6aea45b9a5a6917f09b53
SSDEEP

192:oyaH9ZOzYQOxArYfJNgUmgODKP/gJa/UXvmrPkScVReNEEmISEQttxcJGh:zwbAkfjgUmgODKPCXOrMSpUEwtGQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc812a92ebd67a534ae80684d69b5944f1311ac4233fd78de85fd5106cbb5a48

Files

bc812a92ebd67a534ae80684d69b5944f1311ac4233fd78de85fd5106cbb5a48
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ