bd20557dd5fcef9d36af194729fda619 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd20557dd5fcef9d36af194729fda619
Size

170KB
MD5

bd20557dd5fcef9d36af194729fda619
SHA1

6d72f517625c9db3ed4335fb06a0ff583025ba03
SHA256

6d37eda194332dd117038f32ac86f65dfc70b2ce5c0cb775e9cbc455f1153ead
SHA512

d6df3500849d665c40c559660bd894b1a7d6e8977753d5f84a75c25783811db97f2ef25c1689de2f4cd193fdc678fb125af97534a5e9271bae25205fc24a09f4
SSDEEP

3072:aGLJJYBb1YiJq2Xannup06nuqDV+/U8MjRLn7:nlJYBjc2XannubnuqDV+/UPRb7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd20557dd5fcef9d36af194729fda619

Files

bd20557dd5fcef9d36af194729fda619
.exe windows:5 windows x86 arch:x86

96a2bb2fa4ed21d304da918749733f8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
CopyIcon
GetFocus
LoadCursorA
IsMenu
GetCursor

advapi32

RegOpenKeyExA
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyA

kernel32

ExitProcess

Sections

.binb
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.eplae
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.himno
Size: 130KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jbnjl
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kfebf
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ