userbuffer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

userbuffer.exe
Size

274KB
MD5

db21c227f853361cdee7a9084c34be39
SHA1

7c2d85a78c747be5801b001525a8d0db54346753
SHA256

2bc67d50128f17f85d502d96481078832efb35d9970184967b35ff0615c3a0e6
SHA512

060008662bdfbd1ecd177f759d30aeff4a4eba3fed40b1a43b79f2bf86b257b155c2e2103d90798717af89fbfde90d4004876190e3fa578d2b2682cc7d01d73c
SSDEEP

6144:kXxsgcZtDxEwcjJ3ymgl+7wecLJ2jrxoG8TBR:KsgcZttEvJ3vgloUJ2QTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
userbuffer.exe

Files

userbuffer.exe
.exe windows:6 windows x86 arch:x86

394cbc07d2018b7ef36746e02fb681e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetStdHandle

ole32

CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

user32

GetDC
GetSystemMetrics
ReleaseDC

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
SelectPalette

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ