bd480d5c12e1d0dbbb5ed1e3deb70b62 | Triage

Sharing

General

Target

bd480d5c12e1d0dbbb5ed1e3deb70b62
Size

27KB
MD5

bd480d5c12e1d0dbbb5ed1e3deb70b62
SHA1

dc54e480228c6fe973ee7c9786ab0ee77e0c83e6
SHA256

656536eca56c5e83d5669b3124c04ee7079b8e754fa46a87c73dbc87d84f5f07
SHA512

c90c15076e24f9f68abf33f5e89a7c6f96ea86dba6d51da9ab92ca197583545b50a194e4a9022b99b82cb589b8254b21e6cf266bf9233df94a7064ffd5bdd4d3
SSDEEP

384:jt6dCSkD1DYuZOnNuTqsqk/y6MzpIS/0ZGR9w1EN:I49pDYuZOnNuTYsMzphD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd480d5c12e1d0dbbb5ed1e3deb70b62

Files

bd480d5c12e1d0dbbb5ed1e3deb70b62
.exe windows:4 windows x86 arch:x86

e6d4d4d27f28e2d0f3d44f1a8257201c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
AllocConsole
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
ctime
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
malloc
memcpy
memset
perror
signal
strcat
strcpy
strlen
strncat
time

user32

FindWindowA
GetAsyncKeyState
ShowWindow

ws2_32

WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
socket

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE