bb9c0ed9eb2ebf5d9148c9e00963eaa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb9c0ed9eb2ebf5d9148c9e00963eaa6
Size

16KB
MD5

bb9c0ed9eb2ebf5d9148c9e00963eaa6
SHA1

e5ad8ada061afa3dca9c50696c0ea8c222e04dc3
SHA256

1e74b048b320a920508b09259b82ba50d53ad8ed664a562b7a7dfb7eadf76842
SHA512

ca4efdbe42b4294e2cf7e671ce1183203582aa82782ac18d85568fc5a0921712f6b0d2b68184a550a35bd0d229bb79e7f6e585f43eda38f5483f507882f501c5
SSDEEP

384:sQe0Nx1Q3H2pCz087Cx7QCgXEjr8c5pJ2g1K1:4e2Hx0DFgXEjQKJ2Z1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb9c0ed9eb2ebf5d9148c9e00963eaa6

Files

bb9c0ed9eb2ebf5d9148c9e00963eaa6
.exe windows:4 windows x86 arch:x86

ae0267a0645ae8f557eed6592d02718b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
ExpandEnvironmentStringsA
GetVolumeInformationW
ReadConsoleW
FindFirstFileExA
lstrcatA
GetModuleFileNameA
GetLocaleInfoA
GlobalFindAtomW
WriteConsoleInputA
lstrcmpiA
GetDiskFreeSpaceA
CreateSemaphoreA

user32

CallWindowProcA
RegisterClassA
CharPrevA
DispatchMessageW
CreateAcceleratorTableA

gdi32

CreateICA
GetKerningPairsW
SetICMProfileA
GetICMProfileA
CreateMetaFileA
GetTextExtentExPointA

Sections

.tls
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 779B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ