bdf85b0517508b8a15e44d33ef20f02e

General

Target

bdf85b0517508b8a15e44d33ef20f02e
Size

156KB
MD5

bdf85b0517508b8a15e44d33ef20f02e
SHA1

ff8658e34c80b388c8240e5a5fab03bdc33cec4e
SHA256

1bc7fd48d8388345d972060581675b3fcfcb34860b7cb5bebecfab1b2b90b6e7
SHA512

c8f1d82757d2ff754683abd30fcba187c794d59e7bc2d0e02ba5090375462f38abaf99a294f274116a64c7b019adb49322b43c67c18b4cb453540ea9bbabc04e
SSDEEP

3072:J2Mxd0ErFmppzu1gM7QcEv9lvbsaAu8n59XHLVBOz/2JwphbuKd:EMxd0CQvuYD9VsZu+hLLOz/rbZd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf85b0517508b8a15e44d33ef20f02e

Files

bdf85b0517508b8a15e44d33ef20f02e
.exe windows:5 windows x86 arch:x86

0cdad516b139a0d740cd7e590ed3c848

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
OutputDebugStringA
OpenProcess
FreeEnvironmentStringsW
HeapFree
SetFilePointer
GetPrivateProfileStringW
CreateFileA
CompareStringW
SetErrorMode
GetEnvironmentStringsW
WriteConsoleA
VirtualAlloc
InterlockedIncrement
FreeResource
GetDiskFreeSpaceA
CreateMutexA
GetSystemTime
InitializeCriticalSectionAndSpinCount
LockResource
LoadLibraryA
SystemTimeToFileTime
GetTempPathW
QueryPerformanceFrequency
ExitProcess
DebugBreak
LCMapStringW
GetWindowsDirectoryA
OpenEventW
LoadResource

msvcrt

??3@YAXPAX@Z
_lock
__dllonexit
strncmp
exit
__p__commode
__getmainargs
__set_app_type
?terminate@@YAXXZ
__CxxFrameHandler

user32

PostMessageA
GetWindowDC
MessageBeep
EndDialog
OffsetRect
GetWindowLongA
MoveWindow
GetWindowThreadProcessId
InvalidateRect
RegisterWindowMessageA
RegisterWindowMessageW
CharUpperW
GetSysColor
RegisterClassW

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0cdad516b139a0d740cd7e590ed3c848

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 512B - Virtual size: 512B

.data Size: 32KB - Virtual size: 277KB

.rsrc Size: 55KB - Virtual size: 55KB

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 512B - Virtual size: 512B

.data
Size: 32KB - Virtual size: 277KB

.rsrc
Size: 55KB - Virtual size: 55KB

.reloc
Size: 1024B - Virtual size: 1024B