bb8dd8bdd2e3be4d4b8580cd03a606a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb8dd8bdd2e3be4d4b8580cd03a606a8
Size

9KB
MD5

bb8dd8bdd2e3be4d4b8580cd03a606a8
SHA1

b439f3927e01b6ad7d9aa7910feeb214cafb1917
SHA256

8dc4a8ee6821486559ecab4d40eb086cfeec5d8aea607ed088cb8edfbc4a8023
SHA512

c2566db72503a01ba1657eba9291fba25595bec9e4f397c1a78d1b41cd94da5c17825ac7cbbc08b39c3d098187477cb816fc1d3773b30ba7edb069b8c1da0b1c
SSDEEP

96:BELcIAau1hvMjaTdM35CyPs9lD4mJJ4dpVbFWviBgt:BxRKWdGVPmlIpJFWvi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb8dd8bdd2e3be4d4b8580cd03a606a8

Files

bb8dd8bdd2e3be4d4b8580cd03a606a8
.exe windows:4 windows x86 arch:x86

78b85147ad6527b0f69f18cbcbc5d0a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoUninitialize
CoInitialize

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA

urlmon

URLDownloadToFileA

shlwapi

SHDeleteKeyA

kernel32

GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
CloseHandle
lstrcatA
lstrcpyA
CreateProcessA
GetSystemDirectoryA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE