bdc6c9c6ecb396c5d6008dc38132f4f0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc6c9c6ecb396c5d6008dc38132f4f0N
Size

976KB
MD5

bdc6c9c6ecb396c5d6008dc38132f4f0
SHA1

222b85aeb3257129da26c671e11616bcbc546a15
SHA256

b81ad2f72e9458cbba54914b217e029c26f12e3aa5785d0de01aed86d70c8bd9
SHA512

72b3230f5835fda03a9e74d51bf4824a9c4c4885f4d4bfa81ebab3708488dd2c40cae76a0cf6695619c9488ebbfa5d85c70118440f3d6353362b0bca25c53e2d
SSDEEP

12288:s9deSlySlk6l5Z5sy/y/y/y/y/yS5sy5yS5Z5sy/y/y/yS5sy/y/y/y/yS5Z5Z5H:JSlySl3aaaaa2gSaaa2aaaak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc6c9c6ecb396c5d6008dc38132f4f0N

Files

bdc6c9c6ecb396c5d6008dc38132f4f0N
.exe windows:1 windows x86 arch:x86

8fb490aacc7f5ac566dff4d7a2b7cb7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
GetCurrentProcessId
GetTickCount
TerminateProcess

user32

EnumWindowStationsA
FindWindowA
GetClassInfoExA

gdi32

GetTextFaceA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ