00b90fa42a1b81bb0a22817dee27c933 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b90fa42a1b81bb0a22817dee27c933
Size

379KB
MD5

00b90fa42a1b81bb0a22817dee27c933
SHA1

8a3495bbc9120db61c5026a3ca4877df5d00ac73
SHA256

40b8898a871271f9e7179047b240d469ff97b13b8245ab6dbb68131b197ac808
SHA512

18839925e491217c36fa13188e4fea30bff0009117053bb88dd82ad90bc97362beff94a6c9356f7792ff790d826f0f753854ed19a03ea1c0d1062820e93f46a3
SSDEEP

6144:d/GP014nOhU0HdxbBcItEqbZk58aJ6pbseFRQBOh3dqimJtNd/epu2ah:de3Oe0HdxNTthhaJ0sEQgtlmOpu7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b90fa42a1b81bb0a22817dee27c933

Files

00b90fa42a1b81bb0a22817dee27c933
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

Size: 293KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 38B - Virtual size: 38B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ