b899bc0c38c9313c6ea9adeadc113fd0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b899bc0c38c9313c6ea9adeadc113fd0
Size

25KB
MD5

b899bc0c38c9313c6ea9adeadc113fd0
SHA1

7ce67bacd94c0ca7995c305f7d9b984fb07cf3a6
SHA256

79fab3afee10376dfc66bd94b659ca99f3245af72e0cd116a7dba5278d09251c
SHA512

ff1a34576c2f6e4024c92beee2f81bc30230763f1057fc39709b207f74f44705fc515db3c182009ee9896c81ccddb81730a17f0bdb164fdfaefd4f800d0b2983
SSDEEP

384:fFGx8jJeysTbnYjGhk3CrODK2Twy9WTlD3LZTyLj2BmQwhA4yrR28Yo5cj6DfKOL:fUysfKGGZbwcC9TymBmQwhhB8Y+VDC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b899bc0c38c9313c6ea9adeadc113fd0

Files

b899bc0c38c9313c6ea9adeadc113fd0
.exe windows:4 windows x86 arch:x86

37f3cd05a4ed0aa309b2569719cfa873

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

Sections

CODE
Size: 20KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE