bd5665310e12625ef751c03415b5890a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd5665310e12625ef751c03415b5890a
Size

684KB
MD5

bd5665310e12625ef751c03415b5890a
SHA1

7c1bcd960ed36ea99a50621a06f3cb82dd5164a5
SHA256

58fa428bd67e01beab3eaa434e3ee6d379e1608fced3e66a3bb3bfc2451ba7eb
SHA512

a81ef039f994aaa434f22c73e0b6e50598fdedf7c3bd8a2f9427e80aabe1f9ca972bb1c1a7464e87c091f66619f9d84d5dae61a17600866e8162ae403fb3e0d9
SSDEEP

12288:gpj7qO4n3eHeh0rEyXitUcUEZu4gYqH0JKTIl67hlb6E7gunGl9j:Wj7qFn3AecELtDngj4KTy67hIWq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pro.12-patch/vegas.pro.12.-patch.exe

Files

bd5665310e12625ef751c03415b5890a
.rar
pro.12-patch/readme-leer.txt
pro.12-patch/vegas.pro.12.-patch.exe
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 617KB - Virtual size: 928KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 305KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE