b44ee410cc8ffddf96e2957ee1eee15f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b44ee410cc8ffddf96e2957ee1eee15f
Size

375KB
MD5

b44ee410cc8ffddf96e2957ee1eee15f
SHA1

c4a96723b27b10f6156b08b2bea78f2d01a697ec
SHA256

f7ccabdcfe0ba05339796a2288f590ae0a0cc381ea61450b3b0818441344abbb
SHA512

000910d4543a8a7644e7bb89b887fee405cad93ff216add8465f8e1fcf002aebd8aff30e63b29bf983b983aae328fa01881a6f1d116b4ea918d20970b325c46d
SSDEEP

6144:yAI2Lo6/aPT5Ns3tH1QMkwW1H5DpUq+HZiuCL54DPjKsCDFf5XfIXLabuHHVB4wX:fU62T5mtkTDpUq+rPjKsa5XQ7abqewB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44ee410cc8ffddf96e2957ee1eee15f

Files

b44ee410cc8ffddf96e2957ee1eee15f
.exe windows:4 windows x86 arch:x86

4bd566169f82648f32880f38455fcf07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ReadConsoleOutputA
WriteFileEx
EnumLanguageGroupLocalesA
GetNamedPipeInfo
NlsGetCacheUpdateCount
FindFirstFileExA
GetConsoleCommandHistoryA
SetThreadContext
ReadConsoleA
GetFileSize
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 4KB - Virtual size: 1020KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 349KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ