b8779ab06e9cf63e8736c1d7af1db479 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8779ab06e9cf63e8736c1d7af1db479
Size

107KB
MD5

b8779ab06e9cf63e8736c1d7af1db479
SHA1

ecf51c9ea398b2dae8124ae9d4ac7bb4973a9dc1
SHA256

3f3237614bd4c73482c7a149f49988b14e6839bf08436c0ad64d1afaae48669d
SHA512

586c42627b84d3cc42338a5b20ff6b44e4de3a99486a4c051a94df56afc80572ef7ed74f19e37d16a2c13a474f7f0195a0e9b0f2e619f2c0891f97564faab9cf
SSDEEP

3072:Ls+MsjPSLpQC3tRAYOS0zj6igb3/ulo3u0uA/YlJg:ggeh4Y2zjFgb3/Go8y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8779ab06e9cf63e8736c1d7af1db479

Files

b8779ab06e9cf63e8736c1d7af1db479
.exe windows:4 windows x86 arch:x86

2b6906acf5d8349b80d31ba15df97428

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBColorTable
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
UpdateColors
SaveDC
TextOutW

shell32

StrStrIA
SHAppBarMessage
SHFormatDrive

urlmon

GetClassFileOrMime
IsLoggingEnabledA
URLOpenStreamA
CoInstall
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE