bd275e54c7e35e8e0ac33ca07965c054 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd275e54c7e35e8e0ac33ca07965c054
Size

40KB
MD5

bd275e54c7e35e8e0ac33ca07965c054
SHA1

2cf5e5554951c71eed2a8e74d8bb71928e7aab30
SHA256

06a3cf05a6de55a553e91f1f4cf21ecee2b5a38a5fdba8fb882f2216a5bf384b
SHA512

5b4b1589e9f874393db76b219526a90ebafc59ff51d8b5298c0e7dbb317cc5c78612301681daf38c0060050821e0e71386b894cd538b949f5935d2b9e2bad675
SSDEEP

384:LDtjm2SNjDCBt/77LdhDletiH8ydYGrF6oHzb:9jm2Om3k28sY4F6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd275e54c7e35e8e0ac33ca07965c054

Files

bd275e54c7e35e8e0ac33ca07965c054
.exe windows:4 windows x86 arch:x86

0167bc4fd9637326aeb40b56a83bb2b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
WinExec
Sleep
LCMapStringW
GetStringTypeA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

wsprintfA
MessageBoxA

advapi32

RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ