0b4840bfc8bbcb5cfbcfd2bfb1644462 | Triage

Sharing

General

Target

0b4840bfc8bbcb5cfbcfd2bfb1644462
Size

676KB
MD5

0b4840bfc8bbcb5cfbcfd2bfb1644462
SHA1

6c46babd02d16555815be993dfc1c09d67657cb3
SHA256

c18acf5cc662414660b9509988302ac71a6b337402d2c55cca36b67d3d1ea387
SHA512

ce4bd6c13e156d227acc448b7ba4f9ebd9db3a2df9b4d9ad2e82fb9ba1107786ae702f888cc14a7c571c797e87baf487e648c8f0634536b05e4fe44b89bc5547
SSDEEP

12288:afNuxQXWXvub0Fdaf9Pfchv9J49IuQPqeWK7WjmYHEJcAZ3yDDXTMuWJ+XIaQV3H:ewXjdYVfchFJ4OVqeWcWiYHc+DXQEIaq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b4840bfc8bbcb5cfbcfd2bfb1644462

Files

0b4840bfc8bbcb5cfbcfd2bfb1644462
.exe windows:5 windows x86 arch:x86

78c5182962cee8ca85401ca6b576882b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
GetCommandLineW
VirtualProtectEx
GlobalHandle
GlobalAlloc
GlobalFlags
GlobalFix

user32

DrawEdge
CheckMenuRadioItem

Exports

Exports

OpenMbdyucr
Npfgtbd

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 663KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ