b8e98fe4f9ace87fbadf2746cf6fdcf0 | Triage

Sharing

General

Target

b8e98fe4f9ace87fbadf2746cf6fdcf0
Size

15KB
MD5

b8e98fe4f9ace87fbadf2746cf6fdcf0
SHA1

989824639195fdc442a79a9c6deab4e307f9229d
SHA256

8ad92655a04e761fa16e1074dc9b3ef0a46727ab8ed8988fc08c98bd8ed338a4
SHA512

429882e32d52be1e79418feea5790cfb2b8dd2ca5069678f26f582a7c2823eeddf2135658fb62f35920e60cc4a4cde36f7ed1965cdfb2be356ee025310705b47
SSDEEP

192:bo3ovgObXloo66tEKIk8ANs0t8iY/Ca5sGHCFIlGqg1EI/:E3MBXp6OI2t+Uaq4sKQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e98fe4f9ace87fbadf2746cf6fdcf0

Files

b8e98fe4f9ace87fbadf2746cf6fdcf0
.exe windows:5 windows x86 arch:x86

b44a0943280fa0f7ecd4efa707020fe4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

LoadIconA

advapi32

RegOpenKeyW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ