bd929646ca6126cc4f84c144a0d340f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd929646ca6126cc4f84c144a0d340f6
Size

8KB
MD5

bd929646ca6126cc4f84c144a0d340f6
SHA1

db53c460403dbb90398552f33197e6af881f1133
SHA256

5ddaaee3a996b1e061605378c409a6e98a234eada815a95fb0daf8dd2f96617e
SHA512

77b1ef56b7ae7fcdc1a35e2f097422d69a36896dc9e3b40670e54b68e7d67ade82fa5e86cf61fcc3d3dfd9496b3aed397c64dd200c8f865a90d930e0ed8876b9
SSDEEP

192:wvck8YarPQnLtTCPZy5fCN+yZKpRGvU4pc:wvcXPSTCPM5CN4GvU4pc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd929646ca6126cc4f84c144a0d340f6

Files

bd929646ca6126cc4f84c144a0d340f6
.exe windows:5 windows x86 arch:x86

e2f14eac1917776fe474971288981cf1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
WSAStartup
inet_addr
ioctlsocket
WSAGetLastError
htons
recv
socket
select
closesocket
gethostbyname
send

shlwapi

SHSetValueW

kernel32

GetTickCount
Sleep
GetModuleHandleW
CreateThread
LocalFree
CloseHandle
ReleaseMutex
CreateMutexA
lstrcatW
LocalAlloc
GetLastError
lstrlenW
GetModuleFileNameW
GetFileAttributesW
ExitProcess
lstrlenA
CreateProcessW
WaitForSingleObject
CopyFileW

user32

wsprintfW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

meihrme
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE