b8a44e986a02ef542ef24cdf90fec1f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8a44e986a02ef542ef24cdf90fec1f9
Size

275KB
MD5

b8a44e986a02ef542ef24cdf90fec1f9
SHA1

ebc69029cb950e63ee59ce056802b1e56b7beab9
SHA256

bdcadbfaf7ddaccd513551f1ab52e817b5bc976b35dbbd2cc705b1474ed637d6
SHA512

dc60d39ccbce366e0230f2c0c8cad5c7f99a03520cc6d9dab622b8d870abe5feffe21246ab9b34be2c0b7b7ca40d48e3d820f127b867248563494cefb229f95a
SSDEEP

6144:+18FK5i91Gf+7R0nK9nyj+EzIjMOzOFPTWmb0+OVKGnNYUzlLx92zX8:+1i9Y8GEP4kMOKFPoDvz1D2zs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8a44e986a02ef542ef24cdf90fec1f9

Files

b8a44e986a02ef542ef24cdf90fec1f9
.exe windows:4 windows x86 arch:x86

c214275d368fa49fcc477d2bea821521

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetACP
TlsGetValue
GlobalDeleteAtom
CreateProcessW
EnumSystemLocalesW
GlobalFindAtomW
DeleteFileW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ