bfd4f0f7acbf1ffd0a458515332791c17c4bb8668571b0c0d7b7755ab112e0ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd4f0f7acbf1ffd0a458515332791c17c4bb8668571b0c0d7b7755ab112e0ad
Size

59KB
MD5

813b54d416bb23f183840fd27d62e5e8
SHA1

45cc6b7dece6ea1ea31cc31bf869c3f48b9d15f2
SHA256

bfd4f0f7acbf1ffd0a458515332791c17c4bb8668571b0c0d7b7755ab112e0ad
SHA512

23414778fd46caec6d7f11d23a93501931c865bd872843e725b99b23bdfb02e8e95ca46189bbcea656536a7a7054d5002132fc668209b5b3b2f601233711b08a
SSDEEP

768:vDqYnMTOV5ZXO9o56McUyc8fHAl4MbPA9ScVOuuGMp0scvgO:AOjXO2MMcUyc2XM89JuGrvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd4f0f7acbf1ffd0a458515332791c17c4bb8668571b0c0d7b7755ab112e0ad

Files

bfd4f0f7acbf1ffd0a458515332791c17c4bb8668571b0c0d7b7755ab112e0ad
.exe windows:5 windows x86 arch:x86

5038cc1d7d4ba6ce1ebcfec67b707138

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
IsBadReadPtr
LoadLibraryA
SetLastError
ExitProcess
FreeLibrary
GetModuleHandleA

user32

MessageBoxIndirectA
SendMessageA
DialogBoxParamA
GetDlgItem
EndDialog
LoadIconA

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ