bde7b573d8ec9a9fe9c6b369c766adaa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bde7b573d8ec9a9fe9c6b369c766adaa
Size

3KB
MD5

bde7b573d8ec9a9fe9c6b369c766adaa
SHA1

361e3ab295827ac657244bc91efc67acb6d027f2
SHA256

f05a6b33a8c80031b627996b1976b228787a4bcf89b0e93b115c83c229a6f04c
SHA512

c20ce2a609daf1a168c630f10b63378e905f96784f1f94af98c60d6d78f6a6e6032810f3f9dbf002ff6a93f8a0cf4ec519779264edd65a3578afefb03447e184

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bde7b573d8ec9a9fe9c6b369c766adaa

Files

bde7b573d8ec9a9fe9c6b369c766adaa
.exe windows:1 windows x86 arch:x86

3ffc28bf37d7eec2bc6c83618fd066e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

DeleteFileA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
CopyFileA
RtlUnwind

user32

GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DefWindowProcA

advapi32

RegFlushKey
RegOpenKeyExA
RegSetValueExA

crtdll

__GetMainArgs
_sleep
exit
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 316B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 964B - Virtual size: 964B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE