Bubbles[.]scr | Triage

Sharing

General

Target

Bubbles.scr
Size

858KB
MD5

336b2c0536c4404b28d7e4404b1dc651
SHA1

0564c364695b64fd5e9f664cc1ccfead7420977c
SHA256

f0e842c802ffc4f064ae8e78dec9aee912325a1b4c0ae4ef68b0ba79e692b751
SHA512

9280b553a372f7ae42db89303a598bc4f9eba334ecb305100ab4d1e02803d0404932bc46f6c0a12acef285985a69e683d47dec261f34189cf99f9304a024e19f
SSDEEP

6144:ex2m/Thm8LMBAxG4SX9Nzad4brbwqQP1/BBFrHM/LwtqjB0szNkHuQJ8:VmEzBAxG4e4J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bubbles.scr

Files

Bubbles.scr
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ