bf55c72fc7874ae5851b79910ed5b4e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf55c72fc7874ae5851b79910ed5b4e3
Size

40KB
MD5

bf55c72fc7874ae5851b79910ed5b4e3
SHA1

a5dd3c4c4923f1767f2295daffb8dcf585a0e960
SHA256

f13c9547ffa542cdcd82dc5ee6265442cdb3c104b790bfd7e67d6cd2a99f5018
SHA512

2420e3e29f06cb1e85a61b28dc6d03252c8808c8ecdc32cd6d6fab7b24069cd9ad688ae3be83b9d3179120c1451329543702e72661d6aef517b456badb28fe0a
SSDEEP

384:0MxPQHuay71QI6ijU2wh4+fxhSvLWvDprGDL6lN7yrOH3QdLejzaq5TTRb:0MxFay71N6ij9ihSviVin9rOHiajztxt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf55c72fc7874ae5851b79910ed5b4e3

Files

bf55c72fc7874ae5851b79910ed5b4e3
.exe windows:5 windows

ec5885042cc2b33d72a078126ecee5b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
DrawTextA
EndPaint
GetClientRect
BeginPaint
DestroyWindow
DefWindowProcA
PostQuitMessage
PostMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

FindNextFileW
GetModuleHandleA
LoadLibraryA
FindClose
FindFirstFileW
GlobalSize
SizeofResource
CreateThread
WaitForSingleObject
GlobalAlloc
GetStartupInfoA
Sleep

comctl32

InitCommonControlsEx

msimg32

GradientFill
AlphaBlend

crtdll

_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
__GetMainArgs
_acmdln_dll
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ