bd8e806f55052da02242c6b39e09efa1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd8e806f55052da02242c6b39e09efa1
Size

402KB
MD5

bd8e806f55052da02242c6b39e09efa1
SHA1

320eea96a9c2fe2d9a4bcca451a99318ca7a6e52
SHA256

90c579c57ac202ad7230581299a82c3aba896fc61673efdb0e64fbd719a237f8
SHA512

b580d8475bdec86b5eebb9f338aa61c9584e472c920aad51bc09fc552dbd91b2afb2d4bbf94887c89a6058d0af615c4ba7613f787cf8cf86f0d71cfa81f61408
SSDEEP

6144:d+MsCS1/AjgOqMVW6vap3FKdGg5lirWsGXdvosPBkp1xB/nI19rkpS:8SShAHqH6ip18PirWsEByBa9rk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd8e806f55052da02242c6b39e09efa1

Files

bd8e806f55052da02242c6b39e09efa1
.exe windows:6 windows x86 arch:x86

76cb49957629b5fe0d40d13588a8762e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
WriteFile
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleW
GetProcAddress
LoadLibraryA
LocalFree
lstrlenW
WideCharToMultiByte
EnumTimeFormatsW
GetConsoleOutputCP
WriteConsoleW

user32

LoadStringW
MessageBoxW

ole32

OleInitialize
OleUninitialize

msvcrt

towlower
malloc
memset

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ