bd07f81a18039a6ec8c0135c0943555d82e99f388f3af2b7af8001db79d44f27 | Triage

Sharing

General

Target

bd07f81a18039a6ec8c0135c0943555d82e99f388f3af2b7af8001db79d44f27
Size

11KB
MD5

61c8660a03a0d285b80b3bedba8461e3
SHA1

9de186def80a0369ffaf12f9839a61e653944203
SHA256

bd07f81a18039a6ec8c0135c0943555d82e99f388f3af2b7af8001db79d44f27
SHA512

8dc9eeb1a237a9b8502d1528707213c031355a8cdc4bd7fe314f8a5f3fda57aac369e0fab02266e02a1e10c00c90a9b01abebf218d251bc813ad33f6785c5221
SSDEEP

192:clVv+894lEixo5gKzviI4P+GZoytVxu+FcTx9EwdZudzgE:cK895xv1EDXtfrFcowdZOzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd07f81a18039a6ec8c0135c0943555d82e99f388f3af2b7af8001db79d44f27

Files

bd07f81a18039a6ec8c0135c0943555d82e99f388f3af2b7af8001db79d44f27
.exe windows:4 windows x64 arch:x64

f59d156e853c11d625b8a63b13285869

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

strlen
strstr
malloc
sscanf
clock
printf
memset
strcpy
strcat
memmove
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

kernel32

Sleep
VirtualAlloc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ