8bb8d9f36e5397b67d70dc7fa152f854 | Triage

Sharing

General

Target

8bb8d9f36e5397b67d70dc7fa152f854
Size

74KB
MD5

8bb8d9f36e5397b67d70dc7fa152f854
SHA1

16f16fc84a47e3a56df1376b8a169d25437e1c53
SHA256

b36271711761768039ca561548506983a828370e16c0c3d2ded4791310f4eeaf
SHA512

248d0048fd2cc0e2ef3a697e9bd1d843712c193c798567be42d3bcd7452ff31f2164d09d575a95dd74e4232fe9430e556327d8530e5d9836ea9bc33742c78a23
SSDEEP

1536:B5Y9G8sE46ibAhP67boR8KfkQJDTPSLn5lIOI1XH8lCI:B5TANRLFJDuLnEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb8d9f36e5397b67d70dc7fa152f854

Files

8bb8d9f36e5397b67d70dc7fa152f854
.exe windows:4 windows x86 arch:x86

a750d706bce9b07bf87afcb2ef520eb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
ReadConsoleInputExA
GetTimeFormatW

user32

CharNextW
IsCharAlphaA
CharUpperA

gdi32

GetCharWidthFloatA
ExtTextOutW
RemoveFontResourceExA
GetCharABCWidthsFloatA

Sections

.fasm
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ