bad4f3cea7de3de5fc1361cfb846186d | Triage

Sharing

General

Target

bad4f3cea7de3de5fc1361cfb846186d
Size

108KB
MD5

bad4f3cea7de3de5fc1361cfb846186d
SHA1

92082be4f46f2bc85466e0fe1c924aa40d586184
SHA256

53ad98d938e17f0470b0e847e36084df7361ae2e89b3cb568456f479a9fd7b46
SHA512

982ccfeaabc429b7eb9ea7b6e98d0ce15f9c918e08c190708b1db7830901a5a5b183a2362ce500f28d3719cf67390cd3381cb2e55fc4b9bdf19b4239cd540ae2
SSDEEP

3072:f91DQEsGNeqSda6Pn/yHirTyk51i7uA848rCeNwn/W:l4Q3SdaU/yCnJ51CuAMWeK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bad4f3cea7de3de5fc1361cfb846186d

Files

bad4f3cea7de3de5fc1361cfb846186d
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 104KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ