0bb4df521d62e1a99602cdd2c2a58f1d | Triage

Sharing

General

Target

0bb4df521d62e1a99602cdd2c2a58f1d
Size

26KB
MD5

0bb4df521d62e1a99602cdd2c2a58f1d
SHA1

a7d4d9e1d8126387797f2e4cd94345fddd2ee90c
SHA256

a935fb25d0b7faddce0caa28d9bfce30ce310756281763c18cf09bdbdade4594
SHA512

0dfd17c6f16474a6c0285715c6a9f0604d5776c689322cbb616c1d23166f48426d31a40ef604457e54d0461a66bdca35f3b330169ea932859949b4b4c7445ced
SSDEEP

384:um+X5yX7Ml3hLka75vNzPCG0faQuw0HxxsSEVyGN74:uNXSorh75gGFsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb4df521d62e1a99602cdd2c2a58f1d

Files

0bb4df521d62e1a99602cdd2c2a58f1d
.exe windows:1 windows x86 arch:x86

1ba27eb89a5c613c6082a11b5faf2435

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
LoadIconA
LoadCursorA
GetMessageA
CreateWindowExA
RegisterClassA
TranslateMessage
DispatchMessageA
DefWindowProcA
EnumChildWindows
SetWindowLongA

kernel32

GetProcAddress
ExitProcess
LoadLibraryA

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 476B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE