bb2058dbf80ecf5a9a520c7c1ea3a288 | Triage

Sharing

General

Target

bb2058dbf80ecf5a9a520c7c1ea3a288
Size

21KB
MD5

bb2058dbf80ecf5a9a520c7c1ea3a288
SHA1

810e79435546fae728732aa3a5b08debcb1ef7a5
SHA256

c8f315ad0a808af31b0c07a7289a3180bdf933c90785537553c61f74b64f5136
SHA512

415a90db156cf56b43935e3ad431f6367e5930919a13aa54c5c8e2caa284e92c59a0fd66aa1a85b6289aa5b2545fdf1270c66d36047df7f593f40e50e93540e6
SSDEEP

384:k+gR41B2fzOG7CuvvDsfrWRFIAGtXK/qXYZAd1ZZotRwaNU:k+oHaGmuv78yRFIAOY23wwaa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb2058dbf80ecf5a9a520c7c1ea3a288

Files

bb2058dbf80ecf5a9a520c7c1ea3a288
.exe windows:4 windows x86 arch:x86

8d6450b48fd6464920bf5cbf6019b128

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LoadLibraryA
GetLastError
GetModuleHandleA
GetTickCount
GetCommandLineA
GetVersion
GetSystemTimeAsFileTime
ExitProcess
GetCurrentThreadId
LoadLibraryExA
ReadConsoleOutputAttribute

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ