0b97ffeb34b290399e6762b11ec7ff79 | Triage

Sharing

General

Target

0b97ffeb34b290399e6762b11ec7ff79
Size

111KB
MD5

0b97ffeb34b290399e6762b11ec7ff79
SHA1

f522d10bd14da84a1e37117a4990791f6656eb31
SHA256

993bfd4c3cc36a81743dc583a64958f8a418d9fc71f922a373ee27cad2fe72e1
SHA512

a8c5f6a702bd248d7629e6d3c0b876fe6c9ad4bb7b8e3d395d71cae120d0ca1c3ec0f381e9ee72d0eb521a686ce8cb7e0ceb3ad7f9f89d1cd611602894d8fd59
SSDEEP

1536:DZrcsPem1yl3PaEX1vE09QZjNEVm2Xr1fdKfVhlA9AN65br87ceVH169epzUIXUP:D+sPeZ3VlOH2Xr+eO65073w9ilS5uji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b97ffeb34b290399e6762b11ec7ff79

Files

0b97ffeb34b290399e6762b11ec7ff79
.dll windows:4 windows x86 arch:x86

bb1083faffdba621fb401ff8aabdc650

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetAsyncKeyState

vstdlib

RandomSeed

tier0

Msg

Sections

.text
Size: 105KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE