0b54fab40d4648c7c37eb6390b0614f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b54fab40d4648c7c37eb6390b0614f1
Size

26KB
MD5

0b54fab40d4648c7c37eb6390b0614f1
SHA1

bbb3b350e7b99c17985dd5647a83b962c8d2d435
SHA256

1e9952441e3b9f637dd13ed2323b051e696ec3dfd02108b0b513977510afe206
SHA512

bc0b1978de7e574befa17a67c9797584aecff734bf46376994f862ba08b69e12da9c1fab8d57b9577070d21c870850495d12547a66533edc3b27e709bf0e83f9
SSDEEP

384:wVWy+l2uXhae2Kl+drs9dg/EOsSaBT352zlBixep27gUCF1+sOLdXgd:6WLX/Is9dgcQaBbGBdp2IF8s+NW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b54fab40d4648c7c37eb6390b0614f1

Files

0b54fab40d4648c7c37eb6390b0614f1
.exe windows:4 windows x86 arch:x86

db3b2cd368e42ed217b545ab175dd884

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

Sections

.text
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 51B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hehe
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE