00b162d59ff662543f5e3c9c752d28c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b162d59ff662543f5e3c9c752d28c1
Size

15KB
MD5

00b162d59ff662543f5e3c9c752d28c1
SHA1

b077e4a8574aab30eb160bc6297f8aa72abcd0af
SHA256

71d1d57748eca335c203ce3a2bcad63db71cc0208f9510931b383cddc52a4ae0
SHA512

d670ae36d5e8d61b0c2b6fbbe789cf98d9bba0011bc2f12c837c22619a35eb0071e4a2ce0d0a223e5147f94fd3ea4c3388af615bef1573c86ca236501837d190
SSDEEP

192:Z9UjipsjMFF3ijZxambZkhRM/oqd3Az9xxNotAvF6evRgAy:Z9Ujil1ijZxaml5r3RCvY8RgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b162d59ff662543f5e3c9c752d28c1

Files

00b162d59ff662543f5e3c9c752d28c1
.exe windows:4 windows x86 arch:x86

3daa69c2a676ed1deca98497fbe4f644

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

KillTimer
SetTimer
TranslateMessage
GetMessageA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 768B - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lqpjnjf
Size: - Virtual size: 256B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE