bd5c722e366cf75405e13b292edb5ca0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd5c722e366cf75405e13b292edb5ca0N
Size

96KB
MD5

bd5c722e366cf75405e13b292edb5ca0
SHA1

f16d03d227abca7375f7b027b10e74413f2d0785
SHA256

a9d1f030381e5f551a8c6a2e1ded2560619ebddf438bc7710cc5473374aff1b0
SHA512

dc2a03e5a7e51c95f393e0ad4010ee5b35fd2d757cacfdd034c5bfd35936a3ee63c943f6501202e6a6c5876abaf31a9394784ec4cb98d6c1811094df7836a260
SSDEEP

3072:qdISbwLAyZnTaFNWEyChTC+Mz3JIpFlJWANP/hw:FfLLZnTaf7R0+kkF9Nu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd5c722e366cf75405e13b292edb5ca0N

Files

bd5c722e366cf75405e13b292edb5ca0N
.exe windows:1 windows x86 arch:x86

4bdb94226eb8d2b42e6e70aaf7fe8c0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

oleaut32

VariantChangeTypeEx

advapi32

RegSetValueExA

version

VerQueryValueA

gdi32

TextOutA

user32

UpdateWindow

wsock32

WSACleanup

Sections

pec1
Size: 44KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE