b8d682b6fdbd29231a7f895c094385d8 | Triage

Sharing

General

Target

b8d682b6fdbd29231a7f895c094385d8
Size

12KB
MD5

b8d682b6fdbd29231a7f895c094385d8
SHA1

6cac6f126bedebfee6510e2de60bd870ae5ae99c
SHA256

43de488bdef351b18161b10912b127e84e84271428fecd311f64aabca2622f5d
SHA512

631487d8e83a82eb48b195ba0d23834dc49bc64dbe1a5f987199aa188f0acfe555e255dea4edb1e29e247c9df8e4fd7ebef71f9546c8360313da7b40e1ecfbad
SSDEEP

48:69nQWAtdGZYfV+YSTNl9ugCAfG9aLU4NIfMIj5x39Ea0KD1zqRJLsQ41Bq:r2Zc5Sb9Z3+UTKkm57FRzqHp41Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d682b6fdbd29231a7f895c094385d8

Files

b8d682b6fdbd29231a7f895c094385d8
.exe windows:4 windows x86 arch:x86

69d31e0e9242713e77170462fda3b614

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassNameA
DestroyWindow

kernel32

GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ