bd21b3ea4a1373d35bbd9767f8ec2a34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd21b3ea4a1373d35bbd9767f8ec2a34
Size

5KB
MD5

bd21b3ea4a1373d35bbd9767f8ec2a34
SHA1

40a8a4fdc5f0fddaa8964c8c01a2dbff20c059f1
SHA256

7d2645aedc0bb50ce26528e87c5def2d0278f16eb11e239ffa724025ff834f1f
SHA512

9c6972ea9e7c8e9e9070570ba58f8010cba9858ad6cf7cf6a3b93b96a33662d3c61839d2ea3ca0a8a018ad612edccd3f18d99edfadf1c66dab15d874c99d736b
SSDEEP

96:dUAbrlKIz8W0EW65ZhHWwXqEQdYKeZ2xMMNlcpqOyq4m:dzrEWlWKxWSKqZ2xMMNN6X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd21b3ea4a1373d35bbd9767f8ec2a34

Files

bd21b3ea4a1373d35bbd9767f8ec2a34
.exe windows:5 windows x86 arch:x86

400a8243fd5c89ee08c1a4444ef5004f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE