bbbb38e7e80d4ff0de2459dc9ad79dfa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbbb38e7e80d4ff0de2459dc9ad79dfa
Size

170KB
MD5

bbbb38e7e80d4ff0de2459dc9ad79dfa
SHA1

3efaea719791b6cb89bcb82fd33823f250fa50f6
SHA256

e9c756b0ccac7657f7106d5f0638e066ae5bfe5dde0e651c44cc3da70ee6574d
SHA512

a215b1f2aa3390548122cdbb500de606885a226ffc692fb6dd4bbd7b6d0cbc73848beed395b8b74f33d19d2a24cf90c2e4f075c933a4bab67e6f25aebe845bf1
SSDEEP

3072:1ub3WB52wrKhBXjyutmdINA4sregSx+j0yy3coHBi3ra70KB8ll:OWaB0INvsagS+j0T3cj7atW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbbb38e7e80d4ff0de2459dc9ad79dfa

Files

bbbb38e7e80d4ff0de2459dc9ad79dfa
.exe windows:4 windows x86 arch:x86

7b3b1b5b1f444777acfcc5ec7f55d10e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

shlwapi

PathAddBackslashA

kernel32

GetTempPathA
InitializeCriticalSection
LoadLibraryW
GetAtomNameW
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
GetFullPathNameA
LoadLibraryA
ResetEvent
Sleep
IsDBCSLeadByte
DeleteCriticalSection
EnumResourceNamesA
QueryMemoryResourceNotification
CreateThread
GetTimeZoneInformation
GetTickCount
SetEvent
GetFullPathNameW
lstrcpyA
FileTimeToSystemTime
GetProcAddress
WaitForSingleObject
FreeLibrary

winmm

mciSendCommandA
sndPlaySoundA

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ