bbec41c73c8abb9d4a558fdca88bd114 | Triage

Sharing

General

Target

bbec41c73c8abb9d4a558fdca88bd114
Size

54KB
MD5

bbec41c73c8abb9d4a558fdca88bd114
SHA1

62a1872f7ec79e7903cc4eeed7dec7e0a350ae33
SHA256

2718029c4ea415518baa864d68c6f00b03009d68f18a152d11b6625fc6eed823
SHA512

051c81571717044356967da24182b4e389c455e517ce095784f2ede74f7053286a23030a6e454509b8178ec62a1ca17b347b8dd152a65c95c4fb65e098e2b294
SSDEEP

768:mx5xGtff3efwDVGxHaZdFazK53PK/ojj0VU49Ps0YQIsCyw0o1AzxjKsS44eO6bO:FffycqHeaof9uUoE0ypoUeOBaxd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbec41c73c8abb9d4a558fdca88bd114

Files

bbec41c73c8abb9d4a558fdca88bd114
.exe windows:4 windows x86 arch:x86

1d43cd5e399f31c49a6f934c29809b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

Sections

.text
Size: 44KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE