0bbf821b59af79c0d7efc3e7f6ed3659 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bbf821b59af79c0d7efc3e7f6ed3659
Size

45KB
MD5

0bbf821b59af79c0d7efc3e7f6ed3659
SHA1

4c30509fb6144ca124f6904a6c932d7b781daf70
SHA256

b8d4bbd7a4dcd4645cd9bf63dc15f7e5fd72d8143c35502c8594632d6a00ec18
SHA512

b4649c40d78db347b5727aa1dbff6db233cede5b78156dfa7ab9f8ba48f0c3dc4edb5893b778dba9d6e7ac4e6145bbd6d1a3585cd3906fa911d30f666a3c1475
SSDEEP

768:45Mpk1xX5DMpUGjJMaj4EsaN3UaHpJ/IPiwiPYmm9BnKg14fp7cK:9p+MpUGjqa4qRUopJ/snmmDnKryK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbf821b59af79c0d7efc3e7f6ed3659

Files

0bbf821b59af79c0d7efc3e7f6ed3659
.exe windows:4 windows x86 arch:x86

2d795dcb1b1015465a24ba819e21e144

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
TlsGetValue
GetDateFormatA
MapViewOfFile
HeapDestroy
CreateThread
TlsFree
GetStdHandle
LocalAlloc
ReadFile
GetProcessAffinityMask
lstrcmpiA
SetStdHandle
GetVersionExA

msvcrt

__p__commode
_pctype
_access
_wfopen

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE