b8bcfb67cae455701574fd64bb0322ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8bcfb67cae455701574fd64bb0322ee
Size

20KB
MD5

b8bcfb67cae455701574fd64bb0322ee
SHA1

c4e373e6a82a0fdb7af79cac529dcd957d86f2f3
SHA256

57a98145c2f3dc452bc2a89ee87b4376a72401ce85c33ac501836f481cb8476f
SHA512

87bdf66b3b7e027c2757237765a6ece1409d7c447fc4e14bc00b626548794946e0a331d23c62dda491d22cf2deb00af66d5bcd97e80e21b8db10654af8f0dda7
SSDEEP

384:QsSbz1FbSqy45HPycGTjEQqYIPCbnbf+FCTrlmosOo0AtLhBxWwqPukST3aGH5sQ:JqpbGTjLhTffcCXlmosOo0mxNqPXYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8bcfb67cae455701574fd64bb0322ee

Files

b8bcfb67cae455701574fd64bb0322ee
.exe windows:4 windows x86 arch:x86

ea486e874d6d2d0022c43b26b0bcd2c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetCurrentThread
GetProcAddress
GetThreadContext
HeapAlloc
HeapCreate
LoadLibraryA
ResumeThread
Sleep
SuspendThread

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ