bb32a0898a50974dc137d4deb567117f | Triage

Sharing

General

Target

bb32a0898a50974dc137d4deb567117f
Size

63KB
MD5

bb32a0898a50974dc137d4deb567117f
SHA1

9491d0c7745266e2430769ce8d228544110fd3f9
SHA256

800f0e30ed8c9e8905568b5c020584322c4f4eeaec16643a09e5d2c57938d279
SHA512

d7657ac0551b851eeb9a0a11d3c4ec9f60b613d312357f7382c0e305c2a221cca21bde1a6cfaa3828aa47570cad6ec2f38fa7be6cf94195e31ce964790db6609
SSDEEP

1536:dvtQE6XKDasL5jUBjwbi7m20l0eRRRNfTBoN+F9vt5J:qKGY56jw2iplLTRNbiN+rvp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb32a0898a50974dc137d4deb567117f

Files

bb32a0898a50974dc137d4deb567117f
.exe windows:4 windows x86 arch:x86

ca6abaef9afc78397d1a6f0582a5f6b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertDefaultLocale
UnlockFile
SetHandleContext
DeleteFileW
FlushViewOfFile
QueryDosDeviceA
MoveFileWithProgressA
CreateHardLinkA
IsBadHugeWritePtr
lstrcpyn
GetNumberOfConsoleInputEvents

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE