bd2fe5d660ee65bfd363b94269382d069c020f78e889c015375a1cae334339d2 | Triage

Sharing

General

Target

bd2fe5d660ee65bfd363b94269382d069c020f78e889c015375a1cae334339d2
Size

119KB
MD5

0648a22e4771698978ac71acb1fc66da
SHA1

f2edb9ee169f7054070c6c73e1b30d01ba5794ae
SHA256

bd2fe5d660ee65bfd363b94269382d069c020f78e889c015375a1cae334339d2
SHA512

a26f57a6c8f5d3196d6af27273a607b62ca38bc291fee00b3461a9a66ce1093928fd3d1cf1307b8b10f781ffbea70549eb7dd316f15068553911b0026d4d31dc
SSDEEP

3072:4oGQDo822vsuParSi1+/RnJj763gX7encZLxtmAQ9WJtA9x:4hcy2vsuParS3/xxEACnYzVJte

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd2fe5d660ee65bfd363b94269382d069c020f78e889c015375a1cae334339d2

Files

bd2fe5d660ee65bfd363b94269382d069c020f78e889c015375a1cae334339d2
.exe windows:4 windows x86 arch:x86

e0368b3d97d3cd23f5709d0f7c56987f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsW
QueryPerformanceFrequency
GetSystemTime
GetVDMCurrentDirectories
VDMOperationStarted
EnumResourceLanguagesExW
BasepAllocateActivationContextActivationBlock
GetPackageInfo
OpenWaitableTimerW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE