bb5d259b2e672167c432e2762bad342d4220c81008a07cb08c0787e7dd32de73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb5d259b2e672167c432e2762bad342d4220c81008a07cb08c0787e7dd32de73
Size

3.2MB
MD5

ef92cad2d36a4798d47a951c3d22ceef
SHA1

a3aa4cad45a5f77b91343927469cad4f2d786402
SHA256

bb5d259b2e672167c432e2762bad342d4220c81008a07cb08c0787e7dd32de73
SHA512

0e4b2cc1c61c551ad6d48c7edf972626cf04413c66414d625a0ef4667afe2f436e2be9590ff58fb8fc6e6783f6172606365f4e9d1e92eb6e77fbe99a150651a3
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl+XschCB8bs7bC:Q+8X9G3vP3AMYCBMsa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb5d259b2e672167c432e2762bad342d4220c81008a07cb08c0787e7dd32de73

Files

bb5d259b2e672167c432e2762bad342d4220c81008a07cb08c0787e7dd32de73
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ