bd71f0c9dfd40e05bb5ecc506ac74b24 | Triage

Sharing

General

Target

bd71f0c9dfd40e05bb5ecc506ac74b24
Size

16KB
MD5

bd71f0c9dfd40e05bb5ecc506ac74b24
SHA1

411529c60a9787c69736ad66552339fd6f1212b7
SHA256

8f8edf842122ee2f7a03936113927822d9dfba70bbfee009b195d2e7c86bf928
SHA512

205b8eea61597e66d5c981d4177c9ed1bf3796431eeb96dd82b3ca907150a7a34ce500167a24d42812cf2d80ae1bcd2df2667bc7e21eb30e5cce70d423807504
SSDEEP

192:DmGwWlwFtGbyW0lEzlSt0Hba+wcJYhwZRSvfXtyD28nr78t8:DKWotGyfASt07auMvvtp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd71f0c9dfd40e05bb5ecc506ac74b24

Files

bd71f0c9dfd40e05bb5ecc506ac74b24
.exe windows:1 windows x86 arch:x86

5b052913ad57def32d5cd816cef2f96f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetFileSize
GetModuleFileNameA
GetProcAddress
GetTempPathA
LoadLibraryA
ReadFile
SetFilePointer
VirtualAlloc

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE