bdee2f194333997bea31037a7a053abc | Triage

Sharing

General

Target

bdee2f194333997bea31037a7a053abc
Size

18KB
MD5

bdee2f194333997bea31037a7a053abc
SHA1

267ce4f28e7c45465d0bd61b24029ae54c74cc40
SHA256

af5496e870b26c1dcec9a53c101368e415633a5a6a876853b219bcddad988dc1
SHA512

ae9dd79cf840d340d3da67649a4331ae8334bd01fea21bd4a6b159e460195bc417206291d0a07d7405e74537a09c1b272eeac16f790b86c6813ebd11bc931fc2
SSDEEP

384:wy4NNbsjaayjjyIlci7KgC2PsWmla2h5BbCjrXjMCnel:/4N5GByjj5Gi7KdcsWWu3XVel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdee2f194333997bea31037a7a053abc

Files

bdee2f194333997bea31037a7a053abc
.exe windows:1 windows x86 arch:x86

690bfab8e14f75d9b996a8e13c14e2a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

IsValidURL
CreateAsyncBindCtx
DllCanUnloadNow
IsAsyncMoniker
ZonesReInit
IsValidURL
URLDownloadW

wsock32

htons
sethostname
WSAStartup
ioctlsocket
bind
htonl
SetServiceA
gethostbyaddr
listen

user32

CloseDesktop
DrawStateA
FlashWindow

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE