bb05290bbf04c5930612e363e585d913 | Triage

Sharing

General

Target

bb05290bbf04c5930612e363e585d913
Size

35KB
MD5

bb05290bbf04c5930612e363e585d913
SHA1

75ea026f0731fc7e73833185f391d8714b095993
SHA256

a18d26a074452dce01a7415a7102795e9ea5864b285fcb4edc77c7415b2fda80
SHA512

eb0b7c5394bf9f8904504038cc249df03c1b5873233c4b5718515341ee2c5a27bfe70831fe25856a5a805108261b214aa16175760d0999bbae858ea695c37111
SSDEEP

768:pf5fjfPW8/GOG1Ww4VeLUJWMGU3HBCoMpFudJLHleUso:x5LXXeVIeLUcMGU3IdidJrnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb05290bbf04c5930612e363e585d913

Files

bb05290bbf04c5930612e363e585d913
.exe windows:5 windows x86 arch:x86

cd7f607e1ad93574abd6cd9931ac0494

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx

advapi32

RegCreateKeyW

Sections

.text
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE