bb89c15bf0f4b00612d7996e586956c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb89c15bf0f4b00612d7996e586956c8
Size

11KB
MD5

bb89c15bf0f4b00612d7996e586956c8
SHA1

1b30f5171db82f1e9573f83e75b8648e207ef11d
SHA256

77e29cfb36090b7056fe77ca55815bb05e9a51cb65ea86ae3e756abf1b9dec2e
SHA512

b2d4078a622e0824e44bc2f2d849230fbc6c87777bca90ab174c8e91776694307970b9b51a50926667de5b8970e2a475095e95e48710b385011abfe1cc77ad80
SSDEEP

192:R2h7mF4CJvGVUay0Q9vPjPqMdiQMhEAEuQtVGXxRwCsgpK30LY7WDc:RqCFfJwUay7XChpJOfCsgpK3l7WI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb89c15bf0f4b00612d7996e586956c8

Files

bb89c15bf0f4b00612d7996e586956c8
.exe windows:4 windows x86 arch:x86

a1f3c85938d839f223b9d794fc14cbfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE