b844eeaa027fce88516bb2227ac438fa7b5a9faf70ab86ebf435950de0942819 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b844eeaa027fce88516bb2227ac438fa7b5a9faf70ab86ebf435950de0942819
Size

74KB
MD5

4d2f1047d3ec25b84752843b4c597d7c
SHA1

3b5ebb1ee788b44f5945224fa7afa7715b57242f
SHA256

b844eeaa027fce88516bb2227ac438fa7b5a9faf70ab86ebf435950de0942819
SHA512

7bbe6c49a3313c0213078c448bf6888fe50e30377a0fc9ab71f5ef38b127281032bb847105bc5604172247f51f1b2552bd3b590150d434c07f362b278a2b9e30
SSDEEP

1536:1d80j8XBulvaVEm+odQpNjoCj2HileSpnt7xQaZUnCZgKQm:X8qD96xdKoCj2HioSpnt7xQaZUPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b844eeaa027fce88516bb2227ac438fa7b5a9faf70ab86ebf435950de0942819

Files

b844eeaa027fce88516bb2227ac438fa7b5a9faf70ab86ebf435950de0942819
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE