bbf792fb6591171c8612021b58e32039 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbf792fb6591171c8612021b58e32039
Size

67KB
MD5

bbf792fb6591171c8612021b58e32039
SHA1

7c16405bb46cd38d06b98ccd61206ba59920ffcd
SHA256

dfdd13b49481f914e52f100b09ca210fd0a6537172b87d1fe9a4b5df1c3b6419
SHA512

d325b8162bcdb8b78a7e939d686c9d1bce6e3f0f891c7b3f0a5645cd731a99386335c3fd87c3b9d19f6084d95b0645c6ce46860c9ae1fe2f949c1e8b551066ed
SSDEEP

1536:5pYx/UwW+JIpFWgCcwKJG1gk7YaPPsh2KkMH6qiFae:Scw9JIpFWgCcw2OPEk26/Fb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbf792fb6591171c8612021b58e32039

Files

bbf792fb6591171c8612021b58e32039
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE