0bbd467348f790c40fa52aa55d28f8c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bbd467348f790c40fa52aa55d28f8c0
Size

8KB
MD5

0bbd467348f790c40fa52aa55d28f8c0
SHA1

66533e2b66a11f0ab312f2acee10e9904b2db20d
SHA256

1603a4084ff8d98771df6045ec49f43df3ba0413d6930d177256ecbf35d30909
SHA512

f061605b1fd945483f3cd6fe7b2cafe8ac535b16c0e55bbfb57a431d59b3998a90329e27c19e019bf07422232b66929ebcdff6452d52b08ae17454a20f27e8b1
SSDEEP

192:Kv4XrMI84S6/XrnaAZG7sCvkRe1Ghwur2HWWONO6Np8J:Kv4XA3fADJG4CjEhwSZWO862

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbd467348f790c40fa52aa55d28f8c0

Files

0bbd467348f790c40fa52aa55d28f8c0
.exe windows:4 windows x86 arch:x86

148bf55ceb3e5471ef5f9ffc2bb75e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.ve2f30
Size: 7KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ve2f3
Size: 968B - Virtual size: 968B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE