bd40fed0810a9b5d43ae702bd47b7202

General

Target

bd40fed0810a9b5d43ae702bd47b7202
Size

278KB
MD5

bd40fed0810a9b5d43ae702bd47b7202
SHA1

b1cb741c828371b497f751842cacacd5329b4ca3
SHA256

b51c12079c094d7b45008463d26f75e75aa53003053b28228602385c87200298
SHA512

11aebfcd4e61cafd6e5122a50c74f6792258ffa7aef6745439287f119e4fa2657a29b18943f49896d01e01e14b8ce09665a9a5be6d5892c0a7cb7b2bd6b1e0c7
SSDEEP

6144:MCvJFq7COG+85s5CbLWTrRInjbtMB/TsQOtyA5ytDSXh24p0:fvLq7C5p5sW6hIjbAXJAcRKhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd40fed0810a9b5d43ae702bd47b7202

Files

bd40fed0810a9b5d43ae702bd47b7202
.exe windows:4 windows x86 arch:x86

0312e1ce0c3a4f5543ad0aa50567804a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCPInfo
GetModuleHandleA
GetStringTypeW
HeapFree
GetConsoleOutputCP
FreeLibrary
InterlockedIncrement
AddAtomA
SetUnhandledExceptionFilter
LoadLibraryW
HeapSize
GetACP
UnhandledExceptionFilter
GetFileAttributesW
GetCurrentProcess
GetSystemTimeAsFileTime
GetConsoleCP
WideCharToMultiByte
GetVersionExA
IsValidCodePage
HeapReAlloc
GetStartupInfoA
EnumResourceNamesW
BeginUpdateResourceW
UpdateResourceW
VirtualAlloc
LCMapStringW
SetFilePointer
GetProcessHeap
GetConsoleMode
LeaveCriticalSection
GetCommandLineA
HeapAlloc
GetCurrentProcessId
EnterCriticalSection
CheckNameLegalDOS8Dot3W
LCMapStringA
RtlUnwind
RaiseException
GetStringTypeA
WriteFile
GetModuleFileNameW
GetOEMCP
SetStdHandle
IsDebuggerPresent
LoadLibraryExW
InterlockedDecrement

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoInitialize

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 146KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0312e1ce0c3a4f5543ad0aa50567804a

Headers

File Characteristics

Imports

kernel32

shell32

ole32

setupapi

Sections

.text Size: 146KB - Virtual size: 278KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 128KB - Virtual size: 128KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 278KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 128KB - Virtual size: 128KB

.rsrc
Size: 512B - Virtual size: 4KB