01bd2ffbdce585b4a2f5eb53e0de64a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01bd2ffbdce585b4a2f5eb53e0de64a3
Size

404KB
MD5

01bd2ffbdce585b4a2f5eb53e0de64a3
SHA1

1a8fdd7c365bf4517010447e7b90a779cebba0c2
SHA256

55134098b7fbe4f4916626e648aa6b522bb2b3627919cd2b9734f26e4dfab7dd
SHA512

71cf9efaf18aff411bc943c5cd26a92392df7d652967344d46f53aee493e05cce3a25564b6d84512ee670bf7338a780674e3b3fe31964b83a8b5c0dd32ca26b9
SSDEEP

6144:vwOO68c9hIeX1Zi1lLNBuQT4tnt/EfZdHzJjV1opcL4VEJRl1nvzg4p:fAcDFZiXLzvWnt/ejVjPopz2F1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01bd2ffbdce585b4a2f5eb53e0de64a3

Files

01bd2ffbdce585b4a2f5eb53e0de64a3
.exe windows:4 windows x86 arch:x86

c94491f4800c4584f175c6f34683a12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
InterlockedExchange
CreateFileA
VirtualAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetStringTypeW

user32

ShowWindow
LoadIconA

msvfw32

DrawDibEnd

winmm

mixerSetControlDetails

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ