bb598310171cffec31fcaa81dd4b2d89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb598310171cffec31fcaa81dd4b2d89
Size

436KB
MD5

bb598310171cffec31fcaa81dd4b2d89
SHA1

dec8a3419325b93fabc6b92218f5a355c18770e3
SHA256

b0dec96a345ef2385ee781a52e79c1fbd2c3d046dd4e3b8ff555335c6ce225a7
SHA512

4b0e4323ce5e4e98f2e9fcc6582ad6c56d3e61f702849f9b97a5d39351cb9b2b868ab3ca86cdb92dc2f4d818540dbcc341a6230a6086194986f9bd589d1108a6
SSDEEP

12288:QxXsNPkCExwslNXhQcE0saiCvwyr4oEu1qYU18gyhbtA5KPMYmDIHIVzI:EsNPkR7lFhQcaSwypF1ZU1C7AY0IHI6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb598310171cffec31fcaa81dd4b2d89

Files

bb598310171cffec31fcaa81dd4b2d89
.exe windows:4 windows x86 arch:x86

8e1a961a03a8622ff3e1c958957420de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowsHookA

ole32

OleGetClipboard

advapi32

ConvertSecurityDescriptorToAccessA

ntdll

RtlMapGenericMask

kernel32

GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetProcessHeap

Sections

.text
Size: 430KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE