bdd76079b3d936827f1be694fc99b06c | Triage

Sharing

General

Target

bdd76079b3d936827f1be694fc99b06c
Size

48KB
MD5

bdd76079b3d936827f1be694fc99b06c
SHA1

3b142b591c59aeaddab3dcea0b79dc4b3d6d9353
SHA256

c370868bf651e07bae17e18db794a6e7b52b769c19520d6248531c68542736d9
SHA512

b80714b7eb9eb2ba92bbf94bf5d30d816faab731212eea34a31b667858316d82877cdb1fb6d1c09498a90c2f865c88b51abd2d6803cf5fc175d9085bfc345f32
SSDEEP

768:EmvNZcflBPwGBc1O1ZZ2MqTArg2vUiPkPKFgTxzXG+jI/8Bh7u6EmT0J:xv/cfl5TnZb3M2kPoezXGSI/KVq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdd76079b3d936827f1be694fc99b06c

Files

bdd76079b3d936827f1be694fc99b06c
.exe windows:5 windows x86 arch:x86

aa0e18857cd9410d0aba4a9f27aff2a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

wnsprintfA
PathFileExistsW
StrCmpNIA
PathFindFileNameW
wvnsprintfW
PathRemoveFileSpecW
StrStrW
StrCmpNIW
wnsprintfW
SHDeleteKeyA
PathCombineW
PathMatchSpecW
wvnsprintfA

advapi32

RegDeleteValueA
DuplicateTokenEx
CryptCreateHash
CryptGetHashParam
RegCloseKey
RegQueryValueExA
CryptReleaseContext

Sections

.lmd
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.puhgj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.obytwf
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ