bb94005ab16d7d42afed83340165ae475f4628bdd76f4fc84a7329940054ee9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb94005ab16d7d42afed83340165ae475f4628bdd76f4fc84a7329940054ee9b
Size

84KB
MD5

7e434ab2a6ea3944b75a1c38d682ec31
SHA1

2943cc1f50aaf0266dad839a7c9597bf4337ff46
SHA256

bb94005ab16d7d42afed83340165ae475f4628bdd76f4fc84a7329940054ee9b
SHA512

ff4f64d489c45e34f03bf1cce1e8a6aeb4c84797c173f0155389d5e1feb3ca6d0f3f05422b218cb5c87f48308ba4e2affad157549d2caddb139b51f42eca23b2
SSDEEP

1536:K2t205MNaW3+wba1XGallHlV6oiy+uvocCzac8YaEJwZK4/83ZoMOAI:K2t20GAW3nbaZGgHl4oFjvoBuhZEXtpK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb94005ab16d7d42afed83340165ae475f4628bdd76f4fc84a7329940054ee9b

Files

bb94005ab16d7d42afed83340165ae475f4628bdd76f4fc84a7329940054ee9b
.exe windows:4 windows x86 arch:x86

e608a82b3dc53d2e1e253d3255c7cc3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
GetDllDirectoryA
LeaveCriticalSectionWhenCallbackReturns
FatalExit
ReadConsoleInputW
OpenFileMappingA
ConvertNLSDayOfWeekToWin32DayOfWeek
EnumResourceNamesA
GetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE