bdd4e67b2cd4ab0f038b467036ff69a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdd4e67b2cd4ab0f038b467036ff69a3
Size

740KB
MD5

bdd4e67b2cd4ab0f038b467036ff69a3
SHA1

29e2e1572425e956d803d077a54190292aa27962
SHA256

77957b340d8e477cce6bee405fd442843ce01b6b453bce5e17dc3ddb90c73639
SHA512

389209d63fb226375024f31294e9b2a90c8a42b57a24b9ba4ccd202557b2e8807a55ee8f1f5f944d4b7e727080b7018a8e867b38f0135a76bf87b721422d833e
SSDEEP

12288:6khqTiDS6ZsAMoAhvpHf6HJ//mEgaqdflSQ8+g+SIcWToFja0ovXN1W2zA0B+8Jc:PhMiDaAeR/6pQnlK+SbFlV2vWGxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdd4e67b2cd4ab0f038b467036ff69a3

Files

bdd4e67b2cd4ab0f038b467036ff69a3
.exe windows:4 windows x86 arch:x86

c8353f001f2ad8bf90deb3c902fb93ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

CODE
Size: 704KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE