bc467607ab7c4cd0fa2fce34d14c6fc0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc467607ab7c4cd0fa2fce34d14c6fc0N
Size

22KB
MD5

bc467607ab7c4cd0fa2fce34d14c6fc0
SHA1

e415cfc04a1bbc515d416243452b97cf26f2fcd6
SHA256

612a8a1541305e4d65ac1adb7035b3d450c66490c0db993270c8f1d842b48e65
SHA512

27f5a44a4747bd161083621a5541b1c7b1df7896d5c06530a9169eadfc8dedd06461af73f272d21cf05731c5883a138077a69494651f44b32eb99f6a4a70e93c
SSDEEP

384:2tEChyCYxvUozgn+Vb+pgXqEfSGvQf/lvYBJeruVOtYhj/2Xiypish:2ZAvUEw+Vb4gXqEfSGvolvYDfrj/2yyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc467607ab7c4cd0fa2fce34d14c6fc0N

Files

bc467607ab7c4cd0fa2fce34d14c6fc0N
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ