b8a49308cb658cd5bc2bede6bbd495a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8a49308cb658cd5bc2bede6bbd495a6
Size

59KB
MD5

b8a49308cb658cd5bc2bede6bbd495a6
SHA1

be8a3ee78fd0c54d9ef27f7ae165e18fa42ea89b
SHA256

bfa4555a2838ef75852feae8b0ed2aeb598e97f805f69af90454522963633447
SHA512

71b0da7d396eeaeea490bf5cf2f325984d369d1b31a2cf65bcff30e1dc3cdd1e38234c3386358dda14ee9951bbe27038c755f58f50c0dd59be9201142f0b7ad2
SSDEEP

1536:y9oP+e1REUEZ/sRl/pHdU9FDDu8ARXfyd7uw50dT:eoP+e1OUE/4l/pwo8MfEBST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8a49308cb658cd5bc2bede6bbd495a6

Files

b8a49308cb658cd5bc2bede6bbd495a6
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE