bb35503ec5b9111319d8add7ec6887ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb35503ec5b9111319d8add7ec6887ba
Size

434KB
MD5

bb35503ec5b9111319d8add7ec6887ba
SHA1

e9c687b04efd98f6d6581a7bb0e1e1e6a0343877
SHA256

8627fe27953c4f1ba35e9a6cceeaef06d9036ba386559cd30c9177ed16e58762
SHA512

026847e3a2efcdba0137bb20f8d8ccde5de2148685790ef8aee45857f296ad05e91c8ff7a4a3b5b5235d1a1b9ee74fffe166eaf74676823e1cb1c3a798005980
SSDEEP

12288:4hoCB9wupJJ6PAgcJyGgBDaUQv3nQjTZ9j:ERu0JbpJydNrynQjTZ9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb35503ec5b9111319d8add7ec6887ba

Files

bb35503ec5b9111319d8add7ec6887ba
.exe windows:4 windows x86 arch:x86

12ef9afc7baa551b55fdaf93a69c5796

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

mpr

WNetGetUserA

version

VerQueryValueA

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

wininet

InternetOpenA

winmm

waveInOpen

netapi32

Netbios

wsock32

send

msvfw32

DrawDibDraw

avicap32

capCreateCaptureWindowA

urlmon

URLDownloadToFileA

ws2_32

WSACleanup

Sections

.text
Size: 427KB - Virtual size: 760KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE