bbb6de6c9dcb6d4c9283925c1a11feb28a282e78a775f4850829dcf709394361 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbb6de6c9dcb6d4c9283925c1a11feb28a282e78a775f4850829dcf709394361
Size

2.8MB
MD5

6e23ba9814a9a7da8b5b6222a4fadfaf
SHA1

6b282e159440770a4af5187163ab0786b2c4e0ae
SHA256

bbb6de6c9dcb6d4c9283925c1a11feb28a282e78a775f4850829dcf709394361
SHA512

07c8d8f133fa53a068c6bb3980a79895b24dce6dc86cc86a0c35c9520e0fb2065423fca3bb01701313b756bfbe387904beb1a7ad9bcbec2be3771f4fdb0c698e
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlm4rZLZ5WdO:c+8X9G3vP3AMbhZ5WM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbb6de6c9dcb6d4c9283925c1a11feb28a282e78a775f4850829dcf709394361

Files

bbb6de6c9dcb6d4c9283925c1a11feb28a282e78a775f4850829dcf709394361
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ