bd3b65b87afd661ec3ce46668e19a784 | Triage

Sharing

General

Target

bd3b65b87afd661ec3ce46668e19a784
Size

415KB
MD5

bd3b65b87afd661ec3ce46668e19a784
SHA1

5eed7569b70e0031390ed965becd6269a0a34f41
SHA256

0015f61a302293133b16c1a8e90cfe2c633d6aeecb45990b19430e5731b2fb5c
SHA512

17166a0a558b74badf8729e54a98c3fe286eff8a816edf55847ff4fd7065850ba036a5911d5647b0e3570acecc67b640e9b3debcab3eba78e0a48416785d4e23
SSDEEP

12288:k/xkn6Q9JhlRopdyy+jBOwiFuIBnw/cjxtkOFC1NJ:6xO6uDAdynEnp+TJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3b65b87afd661ec3ce46668e19a784

Files

bd3b65b87afd661ec3ce46668e19a784
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

PEncrypt
Size: 407KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE