bd86fbc2ed36e23c6ca0e0a066e262d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd86fbc2ed36e23c6ca0e0a066e262d8
Size

20KB
MD5

bd86fbc2ed36e23c6ca0e0a066e262d8
SHA1

4f6699ccfd1f336c486b78292b6e716060a51d3d
SHA256

eb0acf945e10c6703a91a66f63a819d91edf1dc9f4a7c75656adc205afddc5c1
SHA512

8509c4f93bc4924c9e109fe4f0d50334cd164adec723c71ad99e852793457e7dd3bc16eb3adf40edea89a58638502e1f2c2da3805513e993131da2c315f0b242
SSDEEP

384:uIoI/mu/X4+VAUgHxVNFR6/XbgElCkhIRkTOYAdoOAiODTaFmR:uc9M1RVNFRkrgEl/qRkiB+OUHR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd86fbc2ed36e23c6ca0e0a066e262d8

Files

bd86fbc2ed36e23c6ca0e0a066e262d8
.exe windows:4 windows x86 arch:x86

4e78a117b5c8bd2dee265c8164dc4541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetProcAddress
GetThreadContext
HeapAlloc
HeapCreate
LoadLibraryA
ResumeThread
SetThreadContext
SuspendThread
VirtualAlloc

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ