bb2b9e193fcf846a2bbdf391f5f8c984 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb2b9e193fcf846a2bbdf391f5f8c984
Size

101KB
MD5

bb2b9e193fcf846a2bbdf391f5f8c984
SHA1

e6609767674e70b29cdadab6a67914bd5e041885
SHA256

408c9565a6ef0e665251f17b0f116908a0bff3db1df4e4a0f5ce09a09d4d78e9
SHA512

d2eb2c23f9c0dc1d1f80e83ed66dfaa42399aec0106a861efd803ba2fe3f0604fcc35f2d5b3d5b7e4564c6e3e7327a113f7aa883cb0dcbe2c08f6cc2e173ac75
SSDEEP

1536:3Rb90WkpzzWG9ye9+O84EhxP7IT9IQr6sNDAT/QEHi2nc9:F21WGgk+ZTC9IQr6sNMT3C2c9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb2b9e193fcf846a2bbdf391f5f8c984

Files

bb2b9e193fcf846a2bbdf391f5f8c984
.exe windows:5 windows x86 arch:x86

344f2fece68d1462f97ab14f50148b74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
ExitProcess

user32

CharLowerA

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA

shell32

DragQueryPoint

comctl32

ImageList_Copy
ImageList_BeginDrag
ImageList_AddMasked

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DAT2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ