bfd40f369f9c60fb1d64aaf5128545dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd40f369f9c60fb1d64aaf5128545dc
Size

196KB
MD5

bfd40f369f9c60fb1d64aaf5128545dc
SHA1

8ec4151477bbc6ad146f95681f5810d3acbde753
SHA256

70431acf711ed3f8c29498cbf166992ecad17f53b7f6bcd0ffec15bd7bd0af68
SHA512

8b8cca593d990559a2ea5980cd5dcc07dc7c1ea7b2a93f7f3e066e727703e9cbedc2699a738ab700bfab341dc5ab921daf005d6501f351fa92a96edeca8462a1
SSDEEP

3072:zv0JCEs1FxsxCwx8b3T5ucV/BV0o7/l+wS8SnGRUy27KTaIyb/0FYUFrgeR2jZsW:zv0JCEsUKP5ucVpVTtvU1R5bfeREH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd40f369f9c60fb1d64aaf5128545dc

Files

bfd40f369f9c60fb1d64aaf5128545dc
.exe windows:4 windows x86 arch:x86

781a343b938e5866aead35ace343b729

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
wsprintfA

advapi32

RegEnumValueA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
RegCloseKey

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ