b44cc2ff0cd3dae78f906c27bdbc1c3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b44cc2ff0cd3dae78f906c27bdbc1c3a
Size

76KB
MD5

b44cc2ff0cd3dae78f906c27bdbc1c3a
SHA1

15af07369cb5281ae14e18f938f10669893142f9
SHA256

61c68f4280bcd69557f2af01c5e723d6be158b404e7d32d61c8823fa7e90889a
SHA512

11fa6c60b5b8abf2713fe863298bd0f024e1886b1ecc2f39c0638ff8388d173f8ae8f09f2cf9da8d273dc7cda0e439c6e9402c6abf822dc73b46b48f4b243771
SSDEEP

1536:oV4Tfc2C2cyxpU/DP2hE36Cjrwv8a6pjVrs2ryrd1vUQuq6:A4j+uCRrU8DHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44cc2ff0cd3dae78f906c27bdbc1c3a

Files

b44cc2ff0cd3dae78f906c27bdbc1c3a
.exe windows:4 windows x86 arch:x86

ec7e41e0b86c9ef9f0fa72e974585e86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsSystemResumeAutomatic
PeekConsoleInputA
RtlUnwind
ReadFileScatter
AreFileApisANSI
EnumResourceTypesW
GetComputerNameExW
Module32Next
GetEnvironmentVariableW
MoveFileWithProgressA
SetMailslotInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE