8b227364816e57d658a470e10f5a98bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b227364816e57d658a470e10f5a98bb
Size

62KB
MD5

8b227364816e57d658a470e10f5a98bb
SHA1

b08178460e885a60919f956fb62621b4f6c4e94e
SHA256

bb5c3e0ac1bdfa88a8a612787c4df06393aa42ee96f00d66485fe3239d816032
SHA512

37505e96fa91ef1d229cf1c181a5dba7732ce8c398491bfc3ed2bd72bed17369bfbbbc686640531c31d4d5ea238f959a9f453a6119a6e02f2e309fd633db7717
SSDEEP

1536:s6UkJGRAWoCp5CKGbBX7GtUE0M+w9LBYfbZ8orZ/fJtH3vNOH:s5a9FKelaOhTw9tsFD53F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b227364816e57d658a470e10f5a98bb

Files

8b227364816e57d658a470e10f5a98bb
.exe windows:5 windows x86 arch:x86

48d37b42b1c9ac41201c8bfdd8608ddb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ReadFile
SetConsoleTextAttribute
VirtualProtectEx
ExitProcess

user32

GetTopWindow
MessageBoxA
SendMessageA

Sections

CODE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tdata
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.btcihq
Size: 54KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ