Malicious_bd0da0e7ff2cdc2ca8c8d1eb4c11b7a3e410f8d420933e978ab43af137b4db49[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Malicious_bd0da0e7ff2cdc2ca8c8d1eb4c11b7a3e410f8d420933e978ab43af137b4db49.exe
Size

64KB
MD5

f6819537a6aed8f88254215fee90af6e
SHA1

c554273bc0e2bd164d91680a6cfd0ff0882efa97
SHA256

bd0da0e7ff2cdc2ca8c8d1eb4c11b7a3e410f8d420933e978ab43af137b4db49
SHA512

55169329cb5aa6dc4da45b2b8d034d4d49dd831cd241475746f9dfc4953b9af6dbd0cc9fad9ea9403070ff0590f39c108a9354b80b158a3165f72e9c794e2da3
SSDEEP

1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Malicious_bd0da0e7ff2cdc2ca8c8d1eb4c11b7a3e410f8d420933e978ab43af137b4db49.exe

Files

Malicious_bd0da0e7ff2cdc2ca8c8d1eb4c11b7a3e410f8d420933e978ab43af137b4db49.exe
.dll regsvr32 windows x64

0fea243ddb12b477b6b4ab25be7279d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrlenA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ