bad81c09e06653522a804da754bbf39a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bad81c09e06653522a804da754bbf39a
Size

6KB
MD5

bad81c09e06653522a804da754bbf39a
SHA1

eef4c2c36bbedd24634bc0278c5af904e14d0d7f
SHA256

e3c342d7c387c329acbb48261779b31f355023c429157f6a30317c77be788ac2
SHA512

4f4496015258dc1f0904358b259244ee3537c49b961834b3aa70f61bfe81f4e211a65510f1ac80c93fefe100d29f1470310e2735a050532da357246315009a72
SSDEEP

96:M9ze6DBUGmYq0U99zN/CGfMa1c7MI/HiWTxnruOci:9kBUtYBYCK7BI/CWcp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bad81c09e06653522a804da754bbf39a

Files

bad81c09e06653522a804da754bbf39a
.exe windows:4 windows x86 arch:x86

1b4c3b4b1120894a8be32a121a4a4e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
LoadIconA
DialogBoxParamA
EndDialog

kernel32

ExitProcess
GetFileSize
CreateMutexA
CreateFileA
lstrlenA
UnmapViewOfFile
CloseHandle
GetLastError
CreateFileMappingA
MapViewOfFile
GetModuleHandleA

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE