bdf9cd5d55f9e593fe713debd5771a16

General

Target

bdf9cd5d55f9e593fe713debd5771a16
Size

200KB
MD5

bdf9cd5d55f9e593fe713debd5771a16
SHA1

36eb2f75fb990a631a5aa4084adab566dc0b4e7f
SHA256

5d3eae2807f4da29036be092d4dbcce6237f8027054b11e7424c6ecac06a7385
SHA512

c044597e65433242d0eca5decfea8ff19fb83e53b41a10f5dac3ae17ca2d0f7f673e1e88ffa2d76d8572bfd5f0f5e4d1df880cc361dce4e877e9b7a7b268130e
SSDEEP

3072:ROHIRO3vW20/egL4+4ygIkS3ZpcewHJK9v5WtZr633ITGBSIGuoJ:RwIRO3vQe7+4ulGeAJ6hW7r6nI7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf9cd5d55f9e593fe713debd5771a16

Files

bdf9cd5d55f9e593fe713debd5771a16
.exe windows:4 windows x86 arch:x86

920e009aa8af818b344b6c78c263388d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc71

ord2468
ord764
ord310
ord578
ord784
ord304
ord911
ord313
ord5420
ord1198
ord6118
ord2933
ord299
ord2902
ord876
ord1489
ord297

msvcr71

_onexit
__dllonexit
?terminate@@YAXXZ
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
memset
_except_handler3
free
__CxxFrameHandler
srand
time
_controlfp

kernel32

LockResource
CreateFileA
WriteFile
CloseHandle
DeleteFileA
GetWindowsDirectoryA
GetVersionExA
LoadResource
SizeofResource
FindResourceA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSection
GetLastError

advapi32

RegSetValueExA
RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

920e009aa8af818b344b6c78c263388d

Headers

File Characteristics

Imports

mfc71

msvcr71

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 208B

.rsrc Size: 184KB - Virtual size: 183KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 208B

.rsrc
Size: 184KB - Virtual size: 183KB