bf714ca7e6cef3fbac3952ebd1fea623 | Triage

Sharing

General

Target

bf714ca7e6cef3fbac3952ebd1fea623
Size

68KB
MD5

bf714ca7e6cef3fbac3952ebd1fea623
SHA1

942104ddf71f35d421aede79c02fa5b4ea3ea08f
SHA256

8e6fbe41759583c409038ce356ad69b8d81b8cffba2408afab1e017546186550
SHA512

ac5677413f525b5298116a04e93583403c34065085b7181530a0b4e09ec3c3706ea378dc924c530ab3c2196a56ba90484db7d0711aae943d78a182a9706aab27
SSDEEP

1536:q5+bI2RsF4zYGh/jCMsJiVjO8+LA3f8rTISEig90Oe:q5+KoCtJiVjO8+0v8rTdc9Le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf714ca7e6cef3fbac3952ebd1fea623

Files

bf714ca7e6cef3fbac3952ebd1fea623
.dll windows:5 windows x86 arch:x86

1c2f1ea50b157107a28126db81c7b937

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Information\Desktop\Windows\OS_Starter.exe

Imports

shlwapi

PathFileExistsA

kernel32

SetTimerQueueTimer
CopyFileW
GetCommProperties
IsDBCSLeadByteEx
VirtualProtect
FormatMessageA
FindResourceExA
CreateSemaphoreA

user32

IsCharAlphaW
PostMessageA
OemToCharBuffA
PeekMessageA
LookupIconIdFromDirectory
DestroyIcon
CreateDialogParamW
SendMessageW

msvcrt

_cexit
_exit
__p__fmode
fputs
__setusermatherr
iswctype
_XcptFilter
__p__commode
fgetc
__set_app_type
_controlfp
_initterm
wcstol
_ismbblead
exit
strstr
_amsg_exit
__getmainargs
calloc

Exports

Exports

_ReplyMessageReplyMessageReplyMessage@0

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ