8881bbd066f3f8811b5ada9b9841aa910bfbe659f5fa585c0228b88d1c193313 | Triage

Sharing

General

Target

8881bbd066f3f8811b5ada9b9841aa910bfbe659f5fa585c0228b88d1c193313
Size

170KB
MD5

22966a7caace817a65ce281e538da130
SHA1

b75e3bc1d4c059403ade2d56133f022a05059ab1
SHA256

8881bbd066f3f8811b5ada9b9841aa910bfbe659f5fa585c0228b88d1c193313
SHA512

d8fc463f9ecc42b41f7c039fcb7f12db12766df9d1c32066e8c94ef91a0b9611bd562ad48eba160ca41198cb9ca3de97d93dcde208874b47510939c82aec084a
SSDEEP

3072:dwUtuJp5sgLMnwEK/wZX+xNIidFh8VaSM3eF4MitAdJ3+pJ156:dwUtuD5FYnwEftCNIidr+k3qquJSPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8881bbd066f3f8811b5ada9b9841aa910bfbe659f5fa585c0228b88d1c193313

Files

8881bbd066f3f8811b5ada9b9841aa910bfbe659f5fa585c0228b88d1c193313
.exe windows:1 windows x86 arch:x86

c7ba464847fe80374431db188890c850

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

ulib

??0PATH@@QAE@XZ
??0DSTRING@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ

ntdll

RtlFreeHeap

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE