b8d18bdcf2afa4c55634d73c17c3da65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8d18bdcf2afa4c55634d73c17c3da65
Size

29KB
MD5

b8d18bdcf2afa4c55634d73c17c3da65
SHA1

323e56e38845229e1c3d15d6a5978efbe16b669f
SHA256

108da5fa126c465d047c8cc4a2002a4dc3c34e0afe6bcb19a6b4b58a7d9f5b0e
SHA512

249261c49f53209306513c8735536403c3fc7a460196491c4bcf65236fba498dbee8a99420964d72205bcd43723539fa8a8aa29c3a2aab4256ad89a43d5416ab
SSDEEP

768:7Cx64mWtGSvSogU38HilyjcN0QfLy0DzOKn:Wx6K553SjctfLywOKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d18bdcf2afa4c55634d73c17c3da65

Files

b8d18bdcf2afa4c55634d73c17c3da65
.exe windows:4 windows x86 arch:x86

a69902a2455f61999b8af728ddea64c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
SetDefaultCommConfigA
GlobalAlloc
GetProcessShutdownParameters
OpenWaitableTimerA
SetConsoleCP
GetBinaryTypeA
WideCharToMultiByte
FreeEnvironmentStringsA
RequestWakeupLatency
GetBinaryType
TransmitCommChar
GetTimeFormatA
IsBadStringPtrA
GlobalLock
GetWindowsDirectoryA
_lclose
HeapValidate
ReadConsoleInputExA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

text
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ