8bb340be05db20fd236be1d26e21cde44511458ddae12734d70642802ff7a709 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bb340be05db20fd236be1d26e21cde44511458ddae12734d70642802ff7a709
Size

1.3MB
MD5

28616521b4a6a86ac54fd3ce5d0390bc
SHA1

4c6bc4b304245a3bfd17a0ea3ad59bf5f3007960
SHA256

8bb340be05db20fd236be1d26e21cde44511458ddae12734d70642802ff7a709
SHA512

82ec6663200bc026f0b3e1be31c6bc6bd4b6d24c5a57fa6ad8e07ff8d5789adea44dc8984a5c42f1f2975345e4398acec39ef66d67234955cf694bb297ae7b42
SSDEEP

24576:ZxjGasg2prMDws98TW2Ms1V9xOW77QOvQyzSfpG/UOPY+u47kV4YgX+ab5bHM/iT:j4rMDwNW2D9xOW7cO6U/UOPY+U1G5hce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb340be05db20fd236be1d26e21cde44511458ddae12734d70642802ff7a709

Files

8bb340be05db20fd236be1d26e21cde44511458ddae12734d70642802ff7a709
.exe windows:4 windows x64

e011cf8334eac9f5babb1d0590d063f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle

msvcrt

__C_specific_handler

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ