bd6be215e8ff1435228d9818ca791d98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd6be215e8ff1435228d9818ca791d98
Size

327KB
MD5

bd6be215e8ff1435228d9818ca791d98
SHA1

e484c9b346af22484db11d7a67ecee333370a932
SHA256

b6c18e6b43d5e6ac18b3fd55112132ef8f85d7ec66f2756d1e1721b03efd7639
SHA512

f8c6141c7d6c7fb9453bc118613fa4a9284372d8a0c1c4f939bffb57fcfec951a2c3a967fd74b663bdffe26a291e3f3d41aca3ee53c35f8a4121b03137bb73b0
SSDEEP

6144:2NcN2QQXoBYnlG57dKIWfenSD1n7ELrVuniSv1Y8FjUWPDIm:2eN2fXoBYngPrSJQgi0jjPDt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd6be215e8ff1435228d9818ca791d98

Files

bd6be215e8ff1435228d9818ca791d98
.exe windows:5 windows x86 arch:x86

54c0bb3c7079bc116ce06e92f82cf478

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LoadLibraryA
GetCurrentProcessId
VirtualAlloc
GetStartupInfoW
GetCurrentThreadId
LoadLibraryW
GetModuleHandleW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 145KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ