0b0b6822aac5b07d95e4910f85314d77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b0b6822aac5b07d95e4910f85314d77
Size

16KB
MD5

0b0b6822aac5b07d95e4910f85314d77
SHA1

546ef066baa1861ff4d3652351857bf4f8cbc4e0
SHA256

505969004f3a461ce4ea2f11a55c599abdb4044ba1fc4fef3147378fa473457e
SHA512

b066b252a2eae9af22fda7d348474fba15f12b103b7e24fb14fb1f7b5ca96515fc30b1d8a0ee944ba69a4bb52c005cbf9c95d8044e7244a35fcfb25975d37c99
SSDEEP

384:mkaxk+ijIEu+vHJxlQaHHJ4ZOGLE/xphKtLT8A:mkaxwjnuanJ4sGKxph9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b0b6822aac5b07d95e4910f85314d77

Files

0b0b6822aac5b07d95e4910f85314d77
.exe windows:4 windows x86 arch:x86

3daa69c2a676ed1deca98497fbe4f644

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

KillTimer
SetTimer
TranslateMessage
GetMessageA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

urazyxm
Size: - Virtual size: 71KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE