0bb1040f19f9d776e70ae88ce72be6e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bb1040f19f9d776e70ae88ce72be6e6
Size

94KB
MD5

0bb1040f19f9d776e70ae88ce72be6e6
SHA1

4a52409e755ac8fdac144213c348d26ed838b6aa
SHA256

5b6721d2b5c0d2f8eece57436896dbdd4e148e83f3b140e94ae0bcafac5ee8e8
SHA512

c6097e4d1100e0f4d46e56d9fd813c92b370e32263ee05ab595b197df4f1db388a101c0a11ee351905ea77c7d6b9403021f7af4b350bc21ccd3802aae6a65ba1
SSDEEP

1536:q5QiIoTaj9VrUVFbhJ/SbQl0Zg9fXaj5/2hW5ROGHgsRRL7YsDgiDif7qgboGr:q5QiIoTaBVoLbXTCZg/M5/CW5kYgwZYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb1040f19f9d776e70ae88ce72be6e6

Files

0bb1040f19f9d776e70ae88ce72be6e6
.dll windows:4 windows x86 arch:x86

68ede98bf8a3232c4d19b62936c60555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FreeResource
GetPrivateProfileStringA
GetSystemTimeAsFileTime
LoadLibraryA
RtlUnwind
lstrcatA

Sections

.sforce3
Size: 26KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ