8b660f7cbb736fc3ed11ca0f00f4adfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b660f7cbb736fc3ed11ca0f00f4adfb
Size

752KB
MD5

8b660f7cbb736fc3ed11ca0f00f4adfb
SHA1

8fd0cd6554ba60c9b32c75f2d93f8b9024e3adf7
SHA256

2ccb9faaee22d34cc9a98e7624d1cbaef35ff9f06227bdeeed43fd16279dc702
SHA512

e4d15855865cc905cffd3a91a910dc19727225300b068ba2056100691ba70b0581e4d18ab09eb8bcc67c94581737d323106fd19eded16e07c6b648562f96a6e7
SSDEEP

12288:WOejkva1Iosk1GbCG/QOjk//5yG6Ev/tyGyrnMklHwzIkreVk2g7UzcRB1v7nj:mQvAIOGmT//IGJXYJxQaYVBNn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b660f7cbb736fc3ed11ca0f00f4adfb

Files

8b660f7cbb736fc3ed11ca0f00f4adfb
.exe windows:4 windows x86 arch:x86

d5fcef92b2934ac8db068c95319abea1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
WaitForSingleObject
WaitForMultipleObjects
DeleteFileA
ExitProcess
SetLastError
GetStdHandle
GetConsoleTitleW
ResetEvent
HeapCreate
RemoveDirectoryW
HeapSize
CreateFileA
GetCurrentDirectoryA
GetStartupInfoW
Sleep
FindClose
GetEnvironmentVariableW
GetFileAttributesA
CloseHandle
GetCommandLineW
GetLocalTime
OpenProcess
GetModuleHandleA
CreateMutexA

user32

DispatchMessageW
GetDC
GetSysColor
GetDC
DispatchMessageW
MessageBoxA
PeekMessageA
GetWindowLongA
GetDC
CallWindowProcW
FillRect
GetClassInfoA
FindWindowW

vbajet32

VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 746KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ