bd2e405f9873772aba2ce4c9737c2e2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd2e405f9873772aba2ce4c9737c2e2a
Size

17KB
MD5

bd2e405f9873772aba2ce4c9737c2e2a
SHA1

f5579205ecc3d07bf6fa545ca01a594a48a46063
SHA256

5a6dd9078648d769ec34513ea0b70846b3d0e8b9168f8db54b4a16f23f318171
SHA512

b7252797743caedf8cce91ee7922ab3a8b29d26f4edc1e4af3620aded4400f411980df97aff22bee87aec0f956cecd7f872b3cffb9aea127089f453aba208460
SSDEEP

384:0Fv7qdNEcmZO2Zp+Nye8pqrmub8TyztsDN:0NWNEoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd2e405f9873772aba2ce4c9737c2e2a

Files

bd2e405f9873772aba2ce4c9737c2e2a
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE