HiBitUninstaller-setup-3[.]2[.]10[.]exe | Triage

Resubmissions

09/04/2024, 11:35

240409-np1mnshb61 3

Sharing

Copy URL Twitter E-mail

General

Target

HiBitUninstaller-setup-3.2.10.exe
Size

3.3MB
MD5

000e5871aa0b3fa1d34ea5a895ca60a3
SHA1

2951d82117062e98d3b9bfc1d261541249b9df50
SHA256

8e6160770a694df2553dde15a4db45bb161cc4306019ae98c1ae336e810846ef
SHA512

52dab508b1b4a663da19fc37d420f45b42eebccd5d6a72a5fe4ba6a52ea2826ee840619da95882b621d9e9045fb7fa926fb427545594dfbd2320ef711fccc7d1
SSDEEP

98304:Z2lbXRS9ScWC3iWB4TEex5tFRVTJh82KQUTOVuITd21X:089S4dB4TEGbGUFZ2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HiBitUninstaller-setup-3.2.10.exe

Files

HiBitUninstaller-setup-3.2.10.exe
.exe windows:1 windows x86 arch:x86

Password: 12345678

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ