00bbc69b9fcf732c8556202ef30370cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00bbc69b9fcf732c8556202ef30370cf
Size

68KB
MD5

00bbc69b9fcf732c8556202ef30370cf
SHA1

611361bf7750b8dd87380b3f18bc657dd990a6ea
SHA256

819e97890bf9bce3f01cb92c44b40c74135941681fa77a8d7899064efa2e4c02
SHA512

6a05d483eaf4af0cf091b0ab7562d2b698daba694659eace4573688e552be25ea9dc572f8c97e496a7e339d3f53e8db71b95c1c9f2266a181b841d573deaf309
SSDEEP

768:K8EyXFiQOgFpSafqnlZQBISf968C36JpW:K8fIWfKiISf96qpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00bbc69b9fcf732c8556202ef30370cf

Files

00bbc69b9fcf732c8556202ef30370cf
.exe windows:4 windows x86 arch:x86

b16030cebb9f7a2e8ed6d322fb362851

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WriteFile
CreateFileA
GetModuleFileNameA
SetFileTime
CloseHandle
MoveFileExA
GetVersionExA
GetModuleHandleW
LoadLibraryA
GetSystemDirectoryA
SystemTimeToFileTime
GetModuleHandleA
GetStartupInfoA

advapi32

RegQueryValueExA
RegOpenKeyA

shell32

DoEnvironmentSubstA

shlwapi

PathFileExistsA

msvcrt

_acmdln
_controlfp
sprintf
strcpy
fclose
fopen
strcat
strlen
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ