b44ffcf300ff3d976472e90ce0c5641c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b44ffcf300ff3d976472e90ce0c5641c
Size

173KB
MD5

b44ffcf300ff3d976472e90ce0c5641c
SHA1

ae100d5018c833609201446855ab9dca44b8fa60
SHA256

76e18ec6e6ccc260a91e0375ef84b97a496f5474aabf76532df27ae1d7c6fad8
SHA512

886bb00c3ee4fcb63cc2ad342fd38806f451caae3dfc1e0b8cdcf05c9de153afb5db415338fddafe380983e60ade0a850484910078d8758e021f3580188693db
SSDEEP

3072:SYXxLg6laOh4Irht9TdfO6Js6GmGSkQNwydeDhuqe1VpqEQ0ipMhfSeZPPJz:pnlaK4I39pfbGxQ2nhubLpqjd8JJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44ffcf300ff3d976472e90ce0c5641c

Files

b44ffcf300ff3d976472e90ce0c5641c
.exe windows:5 windows x86 arch:x86

cda18ad1570bf5d951938afa6d1f4098

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\TatBPtFlxsIA\ryEcggvpivr\rvuZrvdMoffn\bvjLmdumj.pdb

Imports

ntdll

RtlCompareMemory

user32

FindWindowA
PeekMessageW
GetWindowRect
CharNextW
SetFocus
wvsprintfA
IsWindowEnabled
ValidateRect
OffsetRect
AdjustWindowRect
GetAsyncKeyState
SetScrollPos
DrawFocusRect
WindowFromPoint
GetShellWindow
OpenIcon
CreateIconFromResource

kernel32

GetCommState
GetLastError
FindCloseChangeNotification
GetOverlappedResult
GetStartupInfoW
EnumResourceNamesA

Exports

Exports

?TemporaryArrayCre

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hvb
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hv
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ