b8bb5afea06c2e91b3e319593652c70a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8bb5afea06c2e91b3e319593652c70a
Size

1.1MB
MD5

b8bb5afea06c2e91b3e319593652c70a
SHA1

284657a30a32b930d4369080bb88cf47ae3bc623
SHA256

77f3cd95ad79ad7f514038ca33e9b072c0498d83871eec1ac95363c3810d80d3
SHA512

74ca1fd6e6e9a7bb8c1db1d83c9c1dd958107573f63b364242eba5bdee0ca8ecd42f6aef1155be41da47e36c935b2003fecdece354be61052c7838608c9162ea
SSDEEP

12288:AUXm9k+HCbRCe2sqYlordoAgWPHYLs6eHT2OuRCl7A4EavGSEoEkxbo5LrsUqktN:AUXmBo/ugWvYDeHT/hA4VvhEFOYkI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8bb5afea06c2e91b3e319593652c70a

Files

b8bb5afea06c2e91b3e319593652c70a
.exe windows:4 windows x86 arch:x86

a7bbbc378f55cacb51bd14de8bf21f2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetVersion
GetCommandLineA
GetUserDefaultLangID
GetCurrentProcess
GetTickCount
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThreadId
QueryPerformanceCounter
SetEvent
LoadResource
TerminateProcess
FormatMessageW

user32

ShowWindow
SetForegroundWindow
PeekMessageA
GetClientRect
EndDialog
GetSystemMenu

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ