BB879OMOJHH[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BB879OMOJHH.exe
Size

651KB
MD5

23a06d6b63d03e13e49a85e56f9c7ff7
SHA1

3128b2e6d1edcb3cec427733996a57bfc7545b93
SHA256

779602a8ec3577cf114c41704c9fe2b90130da2dc331c4bc2cc5a0082ebacfd6
SHA512

b45e9cdec88a5a8bbb4f2c089711cfc36e0e03d9048c167ad34de787f0e28ab5ca39afac445bee0d2766669320cd813efb13616a2042a90d7ad3a6103cdac591
SSDEEP

12288:k82iNHxWoJBGcgKZLqoVB5hXJ3rKW5zxGgAbCEp8rf3R9yGITAqKoe/Juh255Y:H11xjXpZLB5H3r565uLyGuvRe/JuE55

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BB879OMOJHH.exe

Files

BB879OMOJHH.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ