b4bfcc0febb9f97fc81a0481ec0b7b66045682c9d13db1ba2d4682b316807deb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4bfcc0febb9f97fc81a0481ec0b7b66045682c9d13db1ba2d4682b316807deb
Size

93KB
MD5

6e024e4e305ae7b3f17877a38591bdba
SHA1

d0a44cfc65f6d5282a1680578676a246e407fb24
SHA256

b4bfcc0febb9f97fc81a0481ec0b7b66045682c9d13db1ba2d4682b316807deb
SHA512

2b9ce82c44e2608227f2a5d6bf798a776e91ff4fa793e78bb6ed0a2670771bc3591fdbb2c025d4c11a70498dc7ec448abf6ae202a16597ca0c2ce76d9cdff032
SSDEEP

1536:GCJFZxE1iIfOTUP8UnKEFXvx9oFqWGVYL48g1r8UtTE314XLY6bSdKEBES:PDZeoV2fXUPgKkTImpuXBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4bfcc0febb9f97fc81a0481ec0b7b66045682c9d13db1ba2d4682b316807deb

Files

b4bfcc0febb9f97fc81a0481ec0b7b66045682c9d13db1ba2d4682b316807deb
.exe windows:4 windows x86 arch:x86

16bbed1e40af265b522fffd7f04a2955

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sprintf

kernel32

GetDriveTypeA
CloseHandle
SetFileAttributesA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetLogicalDrives

shell32

ShellExecuteA

shlwapi

PathAppendA
PathRemoveExtensionA
PathFindFileNameA
PathFileExistsA
PathGetDriveNumberA

Sections

.text
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ