b80979373a3afe9e8059076bceefec10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b80979373a3afe9e8059076bceefec10.exe
Size

119KB
MD5

b80979373a3afe9e8059076bceefec10
SHA1

1a310d151c607e9926f2f0da0b521ddb5e92ab9b
SHA256

ee2e77b306c992ff6928e291693d77cc4a0975f6dd80d6970830d361f08c3a79
SHA512

d642371b7d607715b22e81a6b33e32bded6095a823d7024352474df054baf3a0caa538a5013d0f555af89f91c069cafff78889ca958280aa918d3d2e93fff0d8
SSDEEP

3072:7zTBB0cyQx7rOVTvyJ2m2afX0NJUygKqVMaRP:zH0cM6Jt2aP08yg1M0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b80979373a3afe9e8059076bceefec10.exe

Files

b80979373a3afe9e8059076bceefec10.exe
.exe windows:4 windows x86 arch:x86

9fb613c5acbb535479b4a04d1dfb0509

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileTransactedA
GetPrivateProfileStructW
WerUnregisterFileWorker
K32EmptyWorkingSet
SetTapeParameters
GetNumaProcessorNode
EncodePointer
ApplicationRecoveryFinished
DeleteFileA
GetCurrencyFormatEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE