b8a7ed130be4a8dae232e8bfc18eb4ee | Triage

Sharing

General

Target

b8a7ed130be4a8dae232e8bfc18eb4ee
Size

238KB
MD5

b8a7ed130be4a8dae232e8bfc18eb4ee
SHA1

ebc585de0c467dfb5061496e8a178e467797a442
SHA256

80c8610b9810667d1f186d461d1a69cbe8c8009fede5bc2f2077d61abf4c2412
SHA512

ec83a14f35ac591f9b105343eef14b1cffc55fb024f10d622d425af5e562d3207431e1aa31c865d8bdbfebd57fe8ff8d08fa41620de60a9a17378fde9ee9b405
SSDEEP

6144:kgUmuMe03uXX6X4ezytiwgtDsvs4LQnB:kg3aXXPgtSs4LQnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8a7ed130be4a8dae232e8bfc18eb4ee

Files

b8a7ed130be4a8dae232e8bfc18eb4ee
.exe .vbs windows:4 windows x86 arch:x86 polyglot

d7e47c7fb949a181ac08b08e8ca5d50e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
Sleep
GetLastError
DeleteFileA
ExitProcess
RemoveDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcatA
lstrcpyA
SetCurrentDirectoryA
CreateDirectoryA
GetTickCount
GetTempPathA
EnumResourceNamesA
lstrcmpiA
GetCommandLineA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 235KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ