b8fe441e1836d2880daaba50ca207ae4 | Triage

Sharing

General

Target

b8fe441e1836d2880daaba50ca207ae4
Size

54KB
MD5

b8fe441e1836d2880daaba50ca207ae4
SHA1

bb7aade4e17d7418fc32b4a7ac37088fc97bda0c
SHA256

5f309afc3f90b3a37374d00df3d128ffefe2be75c08f2e1c83e2757949c86fba
SHA512

c73b1a556a415cd5eda164cb760ae5cb0c219b06bb8999dd1de92becbc05b346c123853db7c7f923de1ddd1890081d3bf84ff59bc13a1fb3aa982924ed13fb93
SSDEEP

768:RBDBPMCe+K4otvdAX/UN5xZd2cSmvZK5Tz5ulsZwlYrg3XxN68sp7LncEeP:RBDdADDnG/Ut2c34x5JsRN68sp7Ze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8fe441e1836d2880daaba50ca207ae4

Files

b8fe441e1836d2880daaba50ca207ae4
.exe windows:4 windows x86 arch:x86

684d2fc71272c66fd85d13a05465be48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetACP
GetFileType
LCMapStringA
SetHandleCount
GetStringTypeA
GetCPInfo
TerminateProcess
SetFilePointer
GetStartupInfoA
lstrcpynA
LCMapStringW
lstrcpyA
GetStringTypeW
GetStdHandle
GetModuleFileNameA
lstrcatA
GetCommandLineA
CreateFileA
GetOEMCP
GetCurrentProcess

user32

CloseWindow
GetDlgItem
LoadCursorA
GetWindowTextLengthA
GetFocus
GetWindowTextA
GetDC

comctl32

ImageList_Destroy
InitCommonControls
ImageList_EndDrag
CreateToolbar
DrawStatusText
ImageList_DrawEx
ImageList_Draw
ImageList_LoadImageA
ImageList_Create
CreateStatusWindow

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ