b71bd08aa1fb7eefba9ce9041c6fe128 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b71bd08aa1fb7eefba9ce9041c6fe128
Size

114KB
MD5

b71bd08aa1fb7eefba9ce9041c6fe128
SHA1

948bb394acd3d715150da9fa7855164b37ce5c98
SHA256

35c633727169e2e96453bdd70ea9e5f5ee2d3317662c97397a887dd9677d3fbb
SHA512

31d1e60a3c67e2e153c1d224cbecf9e987f6b9ae8cff8b562281ca06c543903efbcdfdb5dc600d8a08383e3aa25d157e96a3cc95dad2906a94ee461c408747aa
SSDEEP

1536:ZV/tn5t+edXH8QaX3Ip6c9lm5LxKqllA6b4goAy/cI:ZbpDbwJllA7goAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b71bd08aa1fb7eefba9ce9041c6fe128

Files

b71bd08aa1fb7eefba9ce9041c6fe128
.exe windows:1 windows x86 arch:x86

246667c7894354b09bdd4b0924ff921a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strtol
wcslen
wctomb

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE