bb320240dbda29038c177bc6bba14c7a | Triage

Sharing

General

Target

bb320240dbda29038c177bc6bba14c7a
Size

28KB
MD5

bb320240dbda29038c177bc6bba14c7a
SHA1

4620429a525e1f863fd35241596be56270f7a72c
SHA256

e401d59adf6a7f956e5525db25db4709cd44faa1b4bc6d8a072a4fb73b20f476
SHA512

194ab002527c572bcf977010b4f8d43b5542488d4808ba94169522ddba7b18e60f83f3770ab5e8e4266d0121f1462f576c25cd08d6008367bb89beeafc06a187
SSDEEP

384:MOk9SugAidB0If/PoW1ucglccFTPvF8YmL8SF6ZRXuU:+9ct3PhucsdigPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb320240dbda29038c177bc6bba14c7a

Files

bb320240dbda29038c177bc6bba14c7a
.exe windows:4 windows x86 arch:x86

ec6e70aebddd09d4603bed4f41227150

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA

msvcrt

strcpy
strcmp
_except_handler3
_exit
_XcptFilter
exit
_acmdln
memset
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat
free
calloc
strlen
__getmainargs

advapi32

RegOpenKeyA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE