bc5291ee0d10c3c162be7663068790322127c781d1ed8789a847c140dd0075ad

Sharing

Copy URL

Twitter E-mail

General

Target

bc5291ee0d10c3c162be7663068790322127c781d1ed8789a847c140dd0075ad
Size

436KB
MD5

347bc8ce26d1a2f12714c11f3dacdd86
SHA1

b9bf9b6161ab9a59f733c6b258a5e0977ea96f72
SHA256

bc5291ee0d10c3c162be7663068790322127c781d1ed8789a847c140dd0075ad
SHA512

76b9ed3e398f64948643e127a8f8f9c654777995ff90cbcc58ab69c7134cf53c6c63861cd79aa5ed3eea077a1f0de6a9877708e8461cd243a3334432dcf53254
SSDEEP

12288:CtmEp/dzYtn6c1Ts8ovJlgC2PNBxqe8Ke3:QdzYd6c1TAvfgxxt8N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc5291ee0d10c3c162be7663068790322127c781d1ed8789a847c140dd0075ad

Files

bc5291ee0d10c3c162be7663068790322127c781d1ed8789a847c140dd0075ad
.exe windows:5 windows x86 arch:x86

496dfe13db1db9baba20fd0a8f77624e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathW
GetConsoleAliasesLengthW
GetNumaProcessorNode
GetDefaultCommConfigW
GetCommState
InterlockedDecrement
QueryDosDeviceA
GetEnvironmentStringsW
InterlockedCompareExchange
GetComputerNameW
GetTimeFormatA
ConnectNamedPipe
GetModuleHandleW
ReadConsoleW
ReadConsoleOutputA
SetCommState
GetPriorityClass
LoadLibraryW
CopyFileW
GetConsoleAliasExesLengthW
FormatMessageW
GetSystemTimeAdjustment
DeleteVolumeMountPointW
HeapDestroy
SetConsoleMode
GetFileAttributesW
GetBinaryTypeA
GetShortPathNameA
GetLastError
GetLongPathNameW
GetProcAddress
SetStdHandle
LoadLibraryA
LocalAlloc
MoveFileA
FindAtomA
GetModuleFileNameA
FreeEnvironmentStringsW
BuildCommDCBA
FatalAppExitA
WriteConsoleOutputAttribute
ReleaseMutex
GetVolumeInformationW
HeapFree
HeapAlloc
HeapReAlloc
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetFocus

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 991KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kes
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bubihu
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

496dfe13db1db9baba20fd0a8f77624e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 301KB - Virtual size: 300KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 991KB

.kes Size: 512B - Virtual size: 124B

.tls Size: 1KB - Virtual size: 1KB

.bubihu Size: 1024B - Virtual size: 1024B

.rsrc Size: 118KB - Virtual size: 117KB

.text
Size: 301KB - Virtual size: 300KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 991KB

.kes
Size: 512B - Virtual size: 124B

.tls
Size: 1KB - Virtual size: 1KB

.bubihu
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 118KB - Virtual size: 117KB