02b577f7fafbe9c4795a23fb95e288d6 | Triage

Sharing

General

Target

02b577f7fafbe9c4795a23fb95e288d6
Size

6KB
MD5

02b577f7fafbe9c4795a23fb95e288d6
SHA1

01f7200a824e36ed77c15a630793e8614744db51
SHA256

8adbdf7779037788ed7da7aea99391704b727ca082c0365199048587368c1f9a
SHA512

ce2d433ce0d1ccd0244f5c23ff234b74de4f8d3f007900e0ebd74f001bf2ada635fb02a6849892af9e09e62da93cb067e3bbe61f068f9bfafa2663dd860d8006
SSDEEP

96:zHOTMHYcsU6vYv60A+Y5MzLA1h7RiBYa3/2zO/MUcYkH:6gHYcQYQ+YEmRiWY9M7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02b577f7fafbe9c4795a23fb95e288d6

Files

02b577f7fafbe9c4795a23fb95e288d6
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE