bd17cd7751979d6c381f54689f46ac1f | Triage

Sharing

General

Target

bd17cd7751979d6c381f54689f46ac1f
Size

477KB
MD5

bd17cd7751979d6c381f54689f46ac1f
SHA1

2155d91e5a77672e68497594181de65eb1b17e7e
SHA256

9dc4450a0344470ab13c2cd43ddd18a9d41c2da789f7a2ed26acb59256585d9b
SHA512

7da382b5c356900760469bf70e5c4a6bf6b8aa9481142af6e9c551e2975cb06c1553561ab32dbe756fa9d0a4c0809d8d8946349b919d6a7f1e1b26a407fa0e9e
SSDEEP

12288:2qiHvHe/PDfWE6MdKaPvbkOGLRBE0E8vyNa:7s+zsMgaPmHE0E8vyM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd17cd7751979d6c381f54689f46ac1f

Files

bd17cd7751979d6c381f54689f46ac1f
.exe windows:4 windows x86 arch:x86

f35698dc93f5a0a8ab50af7059166fd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteExA

shfolder

SHGetFolderPathA

winmm

timeEndPeriod

Sections

CODE
Size: 457KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE