bd8cd4470eb39b1c792916973221cde4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd8cd4470eb39b1c792916973221cde4
Size

76KB
MD5

bd8cd4470eb39b1c792916973221cde4
SHA1

227df20090f17ae2bd0eca221e2e591fd7b7b974
SHA256

0a9d01c4d9b5cc932edbfb70194b324f99b141f21d48809c4f7e15becc230b50
SHA512

e1b902d063e4141529789ad75fdc07e3d14e7157700f7bcd1e78a806c4fdb3c7112974cd6e78e341a991737bce21006ebf002c5517b51610f8ba44abf45e6d56
SSDEEP

768:ZQh7TzTBziifTeiZSVWihwEknl0L7OTLeNfQfyJwyKpyxFjjNqbNktuZQexdEKoc:iZ/nEkl8OTKNbzKpe+OgPEKo3s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd8cd4470eb39b1c792916973221cde4

Files

bd8cd4470eb39b1c792916973221cde4
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ