434d159355b9584382f0d0c7c9419861 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

434d159355b9584382f0d0c7c9419861
Size

35KB
MD5

434d159355b9584382f0d0c7c9419861
SHA1

5dc36c4cf8a1ffb3439f19b17836684e41a38b50
SHA256

e9f2a2838f0abc0c3106d3a38b9bf5c2d9e0d69b38f538048bac086f02b8361f
SHA512

68f318e49a13be17359c51e9d86ff0b4d8427f5c55e098bc32becb19df3c49de82c67b609db86b49bbc63234ca921e71d985518920786be3f38e6e378143df2a
SSDEEP

768:BvjB/24d5v3MfR0S73gU0UUUo4UUv7USUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUc:BvbWRF3gU0UUUo4UUv7USUUUUUUUUUUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
434d159355b9584382f0d0c7c9419861

Files

434d159355b9584382f0d0c7c9419861
.dll windows:4 windows x86 arch:x86

39e42316c98281caa045bf51eb6d288d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlEscapeA

kernel32

SetLastError
Beep
SetErrorMode

msvcrt

malloc
free

winmm

auxGetVolume

Exports

Exports

bwmcbe

Sections

.code
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 405B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ