bdf1bd30bf8f4dc03ac7c14a31146be0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdf1bd30bf8f4dc03ac7c14a31146be0
Size

56KB
MD5

bdf1bd30bf8f4dc03ac7c14a31146be0
SHA1

b77eb84e4cc2e55633deae39e35f4367f9497af4
SHA256

d191d745be39b02350d62c50ceace45657a27f72177412e7caa29dfcde44ddd8
SHA512

7ca8d486ff89d4b521fe63a1c1408e1918cb3f7ee09a695fe8d6ab2ba9650c49ce52b64dd84c1fd9af0d59d68fb19ae3b8d0310d9880005541b2c312bc9f0a65
SSDEEP

1536:vCMvcRUYB6PaMQhBjCz++V7RYW03chdtlQKO1:6MvcaYBMi5Cq1W03kO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf1bd30bf8f4dc03ac7c14a31146be0

Files

bdf1bd30bf8f4dc03ac7c14a31146be0
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE