bb0ea9f50ea0d06531e00da4bab13e2a | Triage

Sharing

General

Target

bb0ea9f50ea0d06531e00da4bab13e2a
Size

16KB
MD5

bb0ea9f50ea0d06531e00da4bab13e2a
SHA1

01f8f648a93e5a30d906dd48f5f6327de5c6d277
SHA256

e4b8a9503958f55b49722c426d7f1090a093ff7aea737e18dad80ecf853dfb91
SHA512

a370023296566fb7567f6c8edf1b629c16e6a6c88e829c996019866a89391a3b63eb6334f09b848b26ff1cd36937ccd15aa66d14cf9282d72bc8ef7d053add51
SSDEEP

384:bOPHoOOYwh+cEiRf0ueKSbqlojn7rJv5g7LaFYUs5HzGcd2n0:bmIOMh+5iR6K2qEnfJ5gHaFYHTjdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb0ea9f50ea0d06531e00da4bab13e2a

Files

bb0ea9f50ea0d06531e00da4bab13e2a
.exe windows:4 windows x86 arch:x86

9d870915cd3d95b0df885669e5e74306

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetTickCount

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ