bfd205f279645875fb73b69cc26c710d860c25ed1c35370aa727aa0de177e709 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd205f279645875fb73b69cc26c710d860c25ed1c35370aa727aa0de177e709
Size

18KB
MD5

986e421c1a280f492fca9ba4628b387f
SHA1

b0f2dd1ac4a81760af6831bfa70bd4a3c21438c8
SHA256

bfd205f279645875fb73b69cc26c710d860c25ed1c35370aa727aa0de177e709
SHA512

4d52e8f74d4cc87fb7bc26cb08918ff40a9bacabca184c22e77415e83ed3e3aaafe949348423f07a1cfa1344126c0c163d7f9662ac2da7c44f6450188a8564f3
SSDEEP

384:Ymeqt4k0qbHEeIFLIBnqqqjhTIPWRt/edEFtNY:YmHv0QHEemVNTIPQ/fxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd205f279645875fb73b69cc26c710d860c25ed1c35370aa727aa0de177e709

Files

bfd205f279645875fb73b69cc26c710d860c25ed1c35370aa727aa0de177e709
.exe windows:4 windows x86 arch:x86

433daa09c64243241ac35872a644fc57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualFree
GetCommandLineW
VirtualAlloc
LocalFree
LocalAlloc
GetStartupInfoA

msvcrt

free
memcpy
malloc
_c_exit
memset
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE