b974ffdbd89edd04894d020300e97d03be21d902acc7c911f7bdfe9be192fd79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b974ffdbd89edd04894d020300e97d03be21d902acc7c911f7bdfe9be192fd79
Size

119KB
MD5

5bb006f20260aa6f476c16f8a50d9149
SHA1

8fceead2ebe2d297e1f659aa700ce0e3709a4222
SHA256

b974ffdbd89edd04894d020300e97d03be21d902acc7c911f7bdfe9be192fd79
SHA512

11ce0a5d580ce4317cd2df8a731940bd3df1aaf9019cb9e3f94f919e1842d73a9b0eaec7b1d255962d867b34ef372da18de7b89c9bb9d8520967291ae0186cae
SSDEEP

3072:1+IANyrE+OwW3UBhfAOcxCYklSHX18DrPY/8s4bRbULwPY:IIgIE+/WAdxqhkk3K44RbVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b974ffdbd89edd04894d020300e97d03be21d902acc7c911f7bdfe9be192fd79

Files

b974ffdbd89edd04894d020300e97d03be21d902acc7c911f7bdfe9be192fd79
.exe windows:4 windows x86 arch:x86

e7aa4210783e9abba60ff577aeeee4d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenJobObjectA
PssWalkSnapshot
GetCompressedFileSizeTransactedW
GetProcessPriorityBoost
DosPathToSessionPathW
CallNamedPipeA
BasepCheckWebBladeHashes
CloseThreadpoolTimer
lstrlenA
WritePrivateProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE