bdb83712f0ee78037638d1cbb145cb4968719aaaf7286f291a9d1bb3a108bd82 | Triage

Sharing

General

Target

bdb83712f0ee78037638d1cbb145cb4968719aaaf7286f291a9d1bb3a108bd82
Size

6.6MB
MD5

7b4e69e1b7af3eaddf9af31cea651b46
SHA1

ae497044aa870812325b9b0f59391730391b6b53
SHA256

bdb83712f0ee78037638d1cbb145cb4968719aaaf7286f291a9d1bb3a108bd82
SHA512

5350a560b6a446cc83e1522b162a0b96f410726459e4c824d71d44e165ff9c5ec3a2eb2f7bbda2f0e244c41dc67e1bd5d9328a99d0ce4295acdedd7e7679e2a1
SSDEEP

196608:dumeyacx9QWx5Jm9ZGZ9BA/w6xQPCuXy47U:8RylM6X92xyV7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdb83712f0ee78037638d1cbb145cb4968719aaaf7286f291a9d1bb3a108bd82

Files

bdb83712f0ee78037638d1cbb145cb4968719aaaf7286f291a9d1bb3a108bd82
.exe windows:4 windows x86

a6432f014c33b540fad875d95c291522

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetUBound

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 5.4MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ