bbe70096c0f448f4fab0a67459dd22ad1fd866cc92c3806b733a29fba5dfd2c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbe70096c0f448f4fab0a67459dd22ad1fd866cc92c3806b733a29fba5dfd2c9
Size

1.1MB
MD5

d0bcbdbc78985e4bc36585f077899117
SHA1

b76a1e820c204f6a2f20121ca95916bbb10bec4a
SHA256

bbe70096c0f448f4fab0a67459dd22ad1fd866cc92c3806b733a29fba5dfd2c9
SHA512

309c937686a3d4b1f553f48bc5b5833fb9c2336a9991f39220bcf51f8e17702346d3ad6bd412901276e7ff698a159bb1e3170137badacdd431d4b71b6d9e7483
SSDEEP

24576:pY99PizDR9sdR20A5OA9kJBymEOeUykkspl2LiEe0:pY9EzDRidUPAnQe+k1GN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbe70096c0f448f4fab0a67459dd22ad1fd866cc92c3806b733a29fba5dfd2c9

Files

bbe70096c0f448f4fab0a67459dd22ad1fd866cc92c3806b733a29fba5dfd2c9
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 655KB - Virtual size: 654KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ