bffd5c7e95c73589aa2610b1f70d24be | Triage

Sharing

General

Target

bffd5c7e95c73589aa2610b1f70d24be
Size

49KB
MD5

bffd5c7e95c73589aa2610b1f70d24be
SHA1

34d52e893144ce79af9d97633714b8432a9b1f7c
SHA256

a3b84e25c7cdc5685ae786bf3808f698b29cec73f9e758066f72677aeef1d465
SHA512

322e7625906240b633b049e06dcb081788dad0ec02c19b6beaa70458a13e0496662bf139c5be8474a8225ed884405f788b4bdce157072f497025c87a89e7e074
SSDEEP

1536:5o4aFXgIiRSalVEzuDJx8P2EJgXP1EQg:5egN9VYuDoP2VC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bffd5c7e95c73589aa2610b1f70d24be

Files

bffd5c7e95c73589aa2610b1f70d24be
.exe windows:5 windows x86 arch:x86

c98dea77471e26ea51ed74f696a19f35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
DialogBoxIndirectParamA
EnumWindows
RedrawWindow
CreateIconIndirect
SetWindowTextA
SetDlgItemTextA
SystemParametersInfoA

ole32

OleLockRunning
OleGetAutoConvert
OleCreateLinkFromDataEx
OleGetIconOfClass
CoMarshalInterface
CoCreateInstance
OleSetContainedObject

kernel32

GetConsoleMode
SetEnvironmentVariableA
DeleteCriticalSection
CreateProcessA
GetModuleHandleA
GetFileType
lstrcmpA
SetConsoleCtrlHandler
SetEvent
GetEnvironmentStrings
RtlUnwind
GetTimeZoneInformation
SetStdHandle

gdi32

StartDocA
SetBkMode
Ellipse
GetObjectA
GetTextExtentPoint32A
DeleteDC
GetBkColor

advapi32

RegOpenKeyA
RegOpenKeyExA
FreeSid
AdjustTokenPrivileges
RegQueryValueExA
AddAccessAllowedAce
GetLengthSid

msvcrt

strstr
_ltoa
fopen
qsort
wcschr
_initterm
strrchr
sprintf
fgets

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ