bb837a91e4d21c9f09e42d56ac0ae68f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb837a91e4d21c9f09e42d56ac0ae68f
Size

32KB
MD5

bb837a91e4d21c9f09e42d56ac0ae68f
SHA1

a97ceb295db41ca4c5d1774c24d4e47581b1ee77
SHA256

cab5ae11698f78d5c76152377d80dd5dced1593d5dffae775b4827e37ceb05b8
SHA512

9a3eda79f09375e69869401f9ba37205e4118750b1f5cb894f0fad3a1e81c65cb44b4685140a1f13957ba40d208871c0aba1a6016cce8106ff846ca6b0ceabd4
SSDEEP

768:iwlpdKq5QcmPJs+uFJjwdsa7kaF1EUMmcl6R9Tcm:5pdKkQcmPJ92EdsQkaF1EVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb837a91e4d21c9f09e42d56ac0ae68f

Files

bb837a91e4d21c9f09e42d56ac0ae68f
.exe windows:4 windows x86 arch:x86

2e23ec5fa27151c2ee5e6a7de14c6af6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
CreateProcessA
SetCurrentDirectoryA
GetCurrentDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
GetModuleHandleA
IsBadStringPtrA
lstrcatA
lstrcpyA
HeapAlloc
lstrlenA
GetFullPathNameA
GetProcessHeap
GetTempFileNameA
GetTempPathA
VirtualProtect

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ