bd0812d3085d2f0a7f81f76f84237aa4 | Triage

Sharing

General

Target

bd0812d3085d2f0a7f81f76f84237aa4
Size

91KB
MD5

bd0812d3085d2f0a7f81f76f84237aa4
SHA1

5a45ec662673ab67a1c54ee54159fa350072952f
SHA256

41a60dee2b676edfc86652cb323395a09fadf96474ff7c71d4aaa4d93d9e22ea
SHA512

2ba95e04c1f970f3fac505cf8290a9545c8870fdeedf2032a89a22b6368de0a57694af35190e0f7bd90a8b49d9ad2e1f4b8a12bf3c79428871112069ec457ef9
SSDEEP

1536:AEtUi/0MbZY6LhI57DSsZpIi4cz/nwo3OMW6z8dPcqXFuD3cA1L0O6aGGUyStrB9:A0MYLhmDdZpFFzI6zgks6cm7FGGtStr3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd0812d3085d2f0a7f81f76f84237aa4

Files

bd0812d3085d2f0a7f81f76f84237aa4
.exe windows:4 windows x86 arch:x86

fd96f0ec233ef47bd07c809ab2ff81d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
VirtualUnlock
VirtualFree

user32

IsCharAlphaNumericA
IsChild
KillTimer
MessageBeep

Sections

.text
Size: 65KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE