8b3bbe76f362d7d29efc56292a36aba00fa452106e40a305de440b06c093297b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b3bbe76f362d7d29efc56292a36aba00fa452106e40a305de440b06c093297b
Size

7KB
MD5

41bba72ae6b5c4fa66770d7dfd846b16
SHA1

02625f1ff945a3247735830773c83eacc7bb6d57
SHA256

8b3bbe76f362d7d29efc56292a36aba00fa452106e40a305de440b06c093297b
SHA512

f84f4a28e1ea23ea95beef11e3af8e60eaa76f811f88b7e068070aa8a701123968a650868a7f060f40328f3ca70f2edb733429fa464f2c2cee166731ea9dd1b2
SSDEEP

96:LCJjvJ/T9xSE+r+FhoPtGCx0E8ZFDPjQSU0g2xsngHO9/J0NdrC:Wf/THSTrghQOjnhEiOPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b3bbe76f362d7d29efc56292a36aba00fa452106e40a305de440b06c093297b

Files

8b3bbe76f362d7d29efc56292a36aba00fa452106e40a305de440b06c093297b
.exe windows:6 windows x64 arch:x64

003ccc0c486fadb15eb8b2a6f0a742bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
SetCriticalSectionSpinCount
MultiByteToWideChar
ConvertDefaultLocale
lstrlenA

user32

RegisterClassW
IsWindowVisible
GetWindowContextHelpId
MessageBoxA
GetWindowLongPtrW
IsDialogMessageW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ