0802b5b8aa91930b81b37f38b0bbb977 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0802b5b8aa91930b81b37f38b0bbb977
Size

41KB
MD5

0802b5b8aa91930b81b37f38b0bbb977
SHA1

659c88d504bd5d4060955cd89c8f7571528763d4
SHA256

d8338469cb17a0ed2c664cb26e582e1524de5531be25366ed4168959aee5efe1
SHA512

75239b9a966d4a5939396d2ca6eb805baea9837ee6d5d26882abf7df8052716a96c3d7cb5c8456eb92b92e08b8187fb60d091266cfaef372160792212c023486
SSDEEP

768:XJNkrjJNsdfLFNvkm8gmjZ9jCyKfyMaWFKrucOOk4szBFWgDPMcfxpeu:MrjEVLFNvb8B1pKVXKruJZxBFt9fuu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0802b5b8aa91930b81b37f38b0bbb977

Files

0802b5b8aa91930b81b37f38b0bbb977
.exe windows:5 windows x86 arch:x86

2cf082f78fe51269f192ea43727c71c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WriteFile
CloseHandle
CreateFileA
RemoveDirectoryA
SetConsoleMode
HeapSize

advapi32

RegOpenKeyExA
ClearEventLogA
GetPrivateObjectSecurity
IsTextUnicode
LogonUserA

Sections

.wdqd
Size: 34KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zix
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eribav
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fwf
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE