c8bbdbbd161545a50677754eda5e1973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8bbdbbd161545a50677754eda5e1973
Size

76KB
MD5

c8bbdbbd161545a50677754eda5e1973
SHA1

b6a991688403a3089cb11e5a7ae02d246f92ad2e
SHA256

cf7707fd873abade0107aa832c6c5cc1b63d120613afd195a0495f78b583eee6
SHA512

641d11a8be7e731b17be19a35a2521e86defa10c508ddb3a083e64224df6403b807eac2a4c64c85f279e42a8ed7814fca4c2979b784909b5d974575270423f0e
SSDEEP

1536:MuPEaXXJEMEGlqvwUYc521jk0FYu5+XWiaVvTiuxV5a:dcaXZzEGl4FYI21jRYb/yeko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8bbdbbd161545a50677754eda5e1973

Files

c8bbdbbd161545a50677754eda5e1973
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 67KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE