bf5c27d26fee681a52855db9a03724e0 | Triage

Sharing

General

Target

bf5c27d26fee681a52855db9a03724e0
Size

45KB
MD5

bf5c27d26fee681a52855db9a03724e0
SHA1

16e790109e158f9395d2ab1516d99b715a4b5db0
SHA256

c25879e4ae98b9444d07e2db0cbed3fcca10f57bd0cfea29e7582b5dfadb8f23
SHA512

5c4be5362f43922318690339ce941e7e1e9e9fbcbba9ace2d8ea02338677eb4b6ef2c2ccf7cc13ac5b038417718a1f4a17b378ab6f1e60a135f9c5c973da1f80
SSDEEP

768:b9Y0E0sWUEm+W7giFrOx0/FK+gb0OSzA53FpP/CqQ7vOjoSpjKhahrB:5h/sEiFixoFK+spP/ZQ7xSpjF1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5c27d26fee681a52855db9a03724e0

Files

bf5c27d26fee681a52855db9a03724e0
.exe windows:5 windows x86 arch:x86

9b45bfd4ba8f98120968f5a4eef3c299

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CloseHandle
GetLastError
DuplicateConsoleHandle

user32

BeginPaint

advapi32

OpenThreadToken

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

azjselz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE