dbb2905f839f1d6106bcd25bda5b5950_exe32[.]exe | Triage

Sharing

General

Target

dbb2905f839f1d6106bcd25bda5b5950_exe32.exe
Size

486KB
MD5

dbb2905f839f1d6106bcd25bda5b5950
SHA1

9be4917a22a779e8ce30b24586de540a9e0534bf
SHA256

5263ed62f5a8a017cd98439cfa448384d198b2dae72d94d6d41bfed5e985330a
SHA512

3e1071c34a437062a4c5b5b6eb6c092a2e1edafbef3ddc5a6b2495639a35887be2fc0b04f104a03389b88641cf659143ee6cb6a937457ed633a4e6826c2a10c3
SSDEEP

3072:6AjfEmoEzHwm8F+uUqUNuqqHKufxcZlh09ojoOFXRSkKPb+5:6iE0zQm8Fquqq1cZlh09OoOo1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbb2905f839f1d6106bcd25bda5b5950_exe32.exe

Files

dbb2905f839f1d6106bcd25bda5b5950_exe32.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ