bd168e76d018c7b02b1eab92d2efe74f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd168e76d018c7b02b1eab92d2efe74f
Size

3KB
MD5

bd168e76d018c7b02b1eab92d2efe74f
SHA1

067ae18cece9aef6e553e89829b58a2387de2f19
SHA256

248d09ffb50ac41d6461c8488c989c5994ef45ae2520fe6ee5eab7fb9488f708
SHA512

7dfce73e676e677168e6a32b4ef046374056bbda06085128ef23bc3b74426feb41d900ea851a628962fba0c558df4d0cb68ffbe3ab0e95a563b6fd8c6ccdaddf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd168e76d018c7b02b1eab92d2efe74f

Files

bd168e76d018c7b02b1eab92d2efe74f
.exe windows:4 windows x86 arch:x86

5e07fbe648384352523a3a5abf4ab9cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
GetModuleHandleA
GetProcAddress
OpenProcess
VirtualAllocEx
ExitProcess

user32

FindWindowA
GetWindowThreadProcessId

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ