bb1d006910a4f19520963512918e3c2717e98f24e48fb5008dd3e02fc8ef1894 | Triage

Sharing

General

Target

bb1d006910a4f19520963512918e3c2717e98f24e48fb5008dd3e02fc8ef1894
Size

4.6MB
MD5

c8ce9b7e4eb6488cdfbf27180c0cc9e3
SHA1

98ecb57947ec41e35c8be26c5d7abdf90b188263
SHA256

bb1d006910a4f19520963512918e3c2717e98f24e48fb5008dd3e02fc8ef1894
SHA512

b4bac90199fc738023e6c9784f9daffd0c294108503d28e0e6637c4693f685b0e05803b0282d7699cf38ee31781a6ee1fe72984ff6f5fd04a465300746912ec9
SSDEEP

98304:dPmTVNvqOb2lP8ssYoJrVWsM0r1QnpO590FeB:dPvNDtorDEoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb1d006910a4f19520963512918e3c2717e98f24e48fb5008dd3e02fc8ef1894

Files

bb1d006910a4f19520963512918e3c2717e98f24e48fb5008dd3e02fc8ef1894
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ