3b000893cbfab06bfdbf0fb6f6cbef4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b000893cbfab06bfdbf0fb6f6cbef4c
Size

8KB
MD5

3b000893cbfab06bfdbf0fb6f6cbef4c
SHA1

0e893f25f363a6697b0d8df5f0080fe8c4881f01
SHA256

d59343c3f038a58ccd87059dc12ad3e3849f1ef8dc8fb804d05dd63f36bd4583
SHA512

a065d33916a10aad94d08f07a25f50844decaa5a16588577fe506e67781a67b9cc44bb745b4ee57d70c734f315f76e6ab20f139f950b882ef5aac70c73e574de
SSDEEP

96:zNF7I+Eb03rbzadj+QBFt+5cIE2Qle7kKGfTovTvzDZq1KeQC4vkzR2sqecuB:59I+EbibzgHgoX8QsvTL3eL4vBsq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b000893cbfab06bfdbf0fb6f6cbef4c

Files

3b000893cbfab06bfdbf0fb6f6cbef4c
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE