b8fef5b21e28029c9237233efc68fc6f | Triage

Sharing

General

Target

b8fef5b21e28029c9237233efc68fc6f
Size

100KB
MD5

b8fef5b21e28029c9237233efc68fc6f
SHA1

8dd54f6e717991f3daba459eb700661f6bbf131e
SHA256

ea863772564cbd1fb0bc7778d34f70b7a7755ccce0606b96e01dc4a8fc80b3ee
SHA512

c5aa9c9c8fb70bc3368ec75dc4b22254ca8c6eca880eabedf0c9d5610d3f57728beb79658ac10d995e639dc196f57f460c7361850b51e6a9be4045b2edd1f949
SSDEEP

3072:OyfGVaHHHlu8qq2WbGaP0YKjnGVk8jwaaHw7Koj4rDMwl:Oj4HUv0vcZBD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

b8fef5b21e28029c9237233efc68fc6f

Files

b8fef5b21e28029c9237233efc68fc6f
.exe windows:65535 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE