bb6eb49b8e801be21ce17782d5ce835e603575d1ca7ed409e12fdcdf4f5ff7ed | Triage

Sharing

General

Target

bb6eb49b8e801be21ce17782d5ce835e603575d1ca7ed409e12fdcdf4f5ff7ed
Size

13.7MB
MD5

29f09b8ec00ec1b16793a18a2e7876b9
SHA1

fe943dc420ccf19df8beb4ddcc2c98e3fa6af54f
SHA256

bb6eb49b8e801be21ce17782d5ce835e603575d1ca7ed409e12fdcdf4f5ff7ed
SHA512

0eba6b80b42372f4d43dae5ecbc8cd9b6d278e86ffa103829a435eec8c455fd04f91f8e3f081649b6deed3982e56999c95a05e512e25c37723274d9d7a7e0567
SSDEEP

393216:0RE9B8eH0Yy9/BMQ+mqQtDFdxxQNvLHuof:pmeHyF6SxQNzTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb6eb49b8e801be21ce17782d5ce835e603575d1ca7ed409e12fdcdf4f5ff7ed

Files

bb6eb49b8e801be21ce17782d5ce835e603575d1ca7ed409e12fdcdf4f5ff7ed
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 860KB - Virtual size: 875KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12.6MB - Virtual size: 12.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE