cfacdbeb229254c4658963acb12598406ead972ef9163e6388684ac7e9caaf5bN

Sharing

Copy URL Twitter E-mail

General

Target

cfacdbeb229254c4658963acb12598406ead972ef9163e6388684ac7e9caaf5bN
Size

33KB
MD5

f5ecc0c667659fbaa02e0df11d4e5b20
SHA1

72e8238b45163e678f5c988b8c1acad4400ed896
SHA256

cfacdbeb229254c4658963acb12598406ead972ef9163e6388684ac7e9caaf5b
SHA512

2d71cdc3f814e577e7ad4ee785698ed621fbbd80e7256b58d113de16cef83664264f71cb2a80ed6a8b32cff782547d73973b88295c981bd2eb5747aa57fdb2fa
SSDEEP

768:M8DzTNK39IVm1bzrlqwisKl4qJDisKl4qJ:X/NK3GITlqwisKldJDisKldJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfacdbeb229254c4658963acb12598406ead972ef9163e6388684ac7e9caaf5bN

Files

cfacdbeb229254c4658963acb12598406ead972ef9163e6388684ac7e9caaf5bN
.exe windows:6 windows x64 arch:x64

35865341deb1ff380fd3f4e61ffc3add

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

bridgeunattend.pdb

Imports

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

kernel32

GetLastError
CreateEventW
CloseHandle
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentProcessId

msvcrt

__getmainargs
__C_specific_handler
_XcptFilter
_exit
_cexit
__CxxFrameHandler3
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
??1type_info@@UEAA@XZ
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_callnewh
malloc
_CxxThrowException
free
??0exception@@QEAA@AEBQEBDH@Z
memcpy_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
memmove_s
wcschr
exit
memset

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitialize
CLSIDFromString
CoUninitialize
CoTaskMemFree

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�"
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35865341deb1ff380fd3f4e61ffc3add

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

msvcrt

ole32

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 852B

.rsrc Size: 2KB - Virtual size: 1KB

�" Size: 512B - Virtual size: 200B

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 852B

.rsrc
Size: 2KB - Virtual size: 1KB

�"
Size: 512B - Virtual size: 200B