bd1c5717dfee369092a0cecf1effcbb9 | Triage

Sharing

General

Target

bd1c5717dfee369092a0cecf1effcbb9
Size

280KB
MD5

bd1c5717dfee369092a0cecf1effcbb9
SHA1

729de70ca44289c063d4ff62d0688c7c6b3e19ec
SHA256

182e084c8e61ddeae641303038aa15ac80c9dd3879e56d069c5d9dbb1ec2611d
SHA512

c0e2c149346294ce5500a6bbb98f6bdcf44fe6e3dcfd16c448a667c03ccd691c6051d1a3078d6eb21d3eed84bd0cd672b7d40a3d93c43b06be62a697754c8f02
SSDEEP

6144:zbi5/PtiuDqWyyhoB6hU3amF83RoYAscW6uvuDv8EUZK:zOH/qWPhI6yKtBoVWxvuDvRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd1c5717dfee369092a0cecf1effcbb9

Files

bd1c5717dfee369092a0cecf1effcbb9
.exe windows:4 windows x86 arch:x86

8a8256941f642d7feba57cf5557a2d05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
VirtualAlloc
Heap32First
Heap32Next
WriteFile
GetEnvironmentVariableW
Heap32ListFirst
Sleep

user32

PostMessageA
GetMessagePos
GetInputState

ole32

CoUninitialize
OleInitialize
CoInitialize
CoInitializeEx

advapi32

RegQueryValueExA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE