05bbb10f736dfe9f1b235d66d16d1ee9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05bbb10f736dfe9f1b235d66d16d1ee9
Size

363KB
MD5

05bbb10f736dfe9f1b235d66d16d1ee9
SHA1

4a8e48b91d577186a8b9a8b38d22f590326a1b4f
SHA256

b77f36495b66a08237864879b6dad3feb15361c37aecafb13c5eb0b2937bb2a6
SHA512

41a98648d1be4b6bc9c1c59123e9079d54f80adadab3da2fa8395db62069cea811f12b9f89641ebb2fbcb4dd663b7dbd57d8820690b1387955bfbb771c9c3a02
SSDEEP

6144:I25xqIAxHteDYQ1l1Ep2biBTQh5IjJgNBN5zbxGbNhWF516goxq:Io8N5QjkpWHI9grrzFijW8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05bbb10f736dfe9f1b235d66d16d1ee9

Files

05bbb10f736dfe9f1b235d66d16d1ee9
.exe windows:4 windows x86 arch:x86

2717a120f3532759192746b08a75beea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE