fbb06f760dc0243a77adbbde313b01d5a970820d905639eaf1663d9f42a8dbf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbb06f760dc0243a77adbbde313b01d5a970820d905639eaf1663d9f42a8dbf2
Size

70KB
MD5

de5dba194a11bbd7961b7eaa3e0d9d54
SHA1

c95a74c216ed5f5f92f247b6ba7528dbffd2c211
SHA256

fbb06f760dc0243a77adbbde313b01d5a970820d905639eaf1663d9f42a8dbf2
SHA512

57ae43d5dbf27336178b5b0ff902e91daf99cd202ab7ba27b52665c9609de3f56bb1888d92cc3e1eef136007449269258bb8465ee31f13172141f8b4b0c2eb0c
SSDEEP

768:cwroQb0+9iGZzL1VA8I4O3VKRydrxzqcBoz6sL6Gge83chs7:c1QiGjeMmfrxz1Boz6GTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb06f760dc0243a77adbbde313b01d5a970820d905639eaf1663d9f42a8dbf2

Files

fbb06f760dc0243a77adbbde313b01d5a970820d905639eaf1663d9f42a8dbf2
.exe windows x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ