0bbd0cceca7a306172f8cbc9ed565f99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bbd0cceca7a306172f8cbc9ed565f99
Size

80KB
MD5

0bbd0cceca7a306172f8cbc9ed565f99
SHA1

16aac40e2dd35c7c4bae7388497de5693a3fe9d7
SHA256

20a09aca88b134b37a2199e55b4d73f1307197ab985d6762a5faa33c1a023987
SHA512

a5b39210b7fa26fc56c879ac1353901286f284eedf425afad13f864595cd80e4490dbefe3bcb5f2b89b4effac1d95a2c2e24ad847e3115cd8f6cb64e53dfea59
SSDEEP

1536:Xf5y006rtk5/iHv1i9ieDY33pTkM7JZekFfTW5ieuNQ082hW8fPL:h/0AW1xY31v7JFeJ08vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbd0cceca7a306172f8cbc9ed565f99

Files

0bbd0cceca7a306172f8cbc9ed565f99
.exe windows:4 windows x86 arch:x86

38fafd3464ac53aac6ac02f6d8742cb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
GetComPlusPackageInstallStatus
GetDateFormatW
DeleteAtom
lstrlenA
SetCommState
GetProcessHeap
GetPrivateProfileStringW
GetThreadContext
RequestDeviceWakeup
WaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE