bb986800198e776821524edf3ed5d169 | Triage

Sharing

General

Target

bb986800198e776821524edf3ed5d169
Size

182KB
MD5

bb986800198e776821524edf3ed5d169
SHA1

88ef4b774211c041edbf70bcc886e38b542a404e
SHA256

758d65f8a789c9907afc531845ed26c41f814f554e399acf8e8fdcd4cbd1271e
SHA512

ae41b5cd04ff6699cb19cac5c661a5341b2003b8bb491b10330ce1339960100fe7068fc62b6fd089c6e658dc6078fef898ce7e436c2f3332f90ac9c9f86c5781
SSDEEP

3072:ylKyGFBQRbDSUxEo3cY5icTACkJ6d5XGZ6AT79b0iL4EMK4IXosSQGkxn5vbW+:lCRL335pT5kYdd0Yc4EJ4NsSna5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb986800198e776821524edf3ed5d169

Files

bb986800198e776821524edf3ed5d169
.exe windows:4 windows x86 arch:x86

2323c33b28593ea256b03708e49ee7f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructW
PeekConsoleInputW
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

EnableWindow
SetDlgItemInt
InSendMessageEx
CharLowerBuffA
SendMessageTimeoutW
keybd_event
DdeAddData
GetMessageTime
LoadStringW
InSendMessage
DrawCaption
GetWindowModuleFileNameA
CreateIcon
DdeQueryConvInfo
ShowCursor
CloseWindow
SystemParametersInfoW

gdi32

GetTextExtentExPointA
CreatePolygonRgn
RemoveFontResourceW
StrokePath
EngMarkBandingSurface
GetRegionData
GetTransform
FONTOBJ_pxoGetXform
GdiEntry14
GdiCreateLocalMetaFilePict
SetTextColor

Sections

CODE
Size: 5KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE