bd5f77cd7b1b06fe18c0cc6401b5e9d856cd14e3daea7286376baf60b5f33e73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd5f77cd7b1b06fe18c0cc6401b5e9d856cd14e3daea7286376baf60b5f33e73
Size

32KB
MD5

1e8a9ee6dd563cabcee99ba115df03aa
SHA1

5a3c189e3b0c2826119bd4da5c4624c10b8b545d
SHA256

bd5f77cd7b1b06fe18c0cc6401b5e9d856cd14e3daea7286376baf60b5f33e73
SHA512

92ad9b461341bcfe6831996549eb087f0702226eff183f305b30e591e68b826e70ea457b09861b8614031a586cd4eb30c9567318c07896c393648c3a85f7d0b6
SSDEEP

768:jmu2dMaBjwBMFOHheYdgknvo8sbWqyIsLXyM:Su24SFCeQgknzqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd5f77cd7b1b06fe18c0cc6401b5e9d856cd14e3daea7286376baf60b5f33e73

Files

bd5f77cd7b1b06fe18c0cc6401b5e9d856cd14e3daea7286376baf60b5f33e73
.exe windows:5 windows x86 arch:x86

172a6440b3152d86a4392d15946c54ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

winver.pdb

Imports

kernel32

GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadStringW

shell32

ShellAboutW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE