bd1fada1fb3037d3404f285a0eb1be14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd1fada1fb3037d3404f285a0eb1be14
Size

30KB
MD5

bd1fada1fb3037d3404f285a0eb1be14
SHA1

10d106de75193a05a5b24fb6cc67481469aba318
SHA256

774bf97bf3635e454cfb50785ba964fce93c0244b231f17871b62c3bd0def15a
SHA512

0f3a81608fc5ac79e555e686578cd2e0394fafd92bff977feeee68d68884dbf2c86c088ce727b9073a69a6119818c961595bb51390ff0189ebdc02cbbf0e700c
SSDEEP

768:aoujWi0nVlCjLGBHbR98yXla4Hdglf57mGdVM/nL2:aoFjAGL9TXljdgdNlVoL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd1fada1fb3037d3404f285a0eb1be14

Files

bd1fada1fb3037d3404f285a0eb1be14
.exe windows:4 windows x86 arch:x86

397be31eb8e6b110d028a19bfb811644

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
VirtualProtect
GetTickCount
CancelIo
SizeofResource
LockResource
FreeResource
GetCommandLineA
lstrcpyA
lstrlenA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
ExitProcess
HeapFree
GetProcessHeap

Sections

.text
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ