b8dbcd8d57cbddab21dba41043b24e78b0a4023b8f0d61f38d2e1c7894aaa2b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8dbcd8d57cbddab21dba41043b24e78b0a4023b8f0d61f38d2e1c7894aaa2b2
Size

23KB
MD5

7538462800f00b7dc46de728877c11c1
SHA1

76d7fe7958c062db8f780d2df8cea30293a0b36a
SHA256

b8dbcd8d57cbddab21dba41043b24e78b0a4023b8f0d61f38d2e1c7894aaa2b2
SHA512

391e22726d8fc3d743401b6e84085267fff139b672ad853a396e9119962287f886f0f8563ec0c2ba65c105b0b280f887bc5fcd5df4377bb812f41335c3afa681
SSDEEP

384:jIz4B8eZh93uPIn36g9ABTviBkYbZvzujvB2Vzj6PcqP7yjVq5DUWK:jIUB8093uPWB2BTvi/bZvajvkKzyjaYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8dbcd8d57cbddab21dba41043b24e78b0a4023b8f0d61f38d2e1c7894aaa2b2

Files

b8dbcd8d57cbddab21dba41043b24e78b0a4023b8f0d61f38d2e1c7894aaa2b2
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE