bb1181175bec6cf0dd16ee194a52957f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb1181175bec6cf0dd16ee194a52957f
Size

3.7MB
MD5

bb1181175bec6cf0dd16ee194a52957f
SHA1

86db65dd20461b69703fec8229b500dc3076aab2
SHA256

a480f9d8767bcfdd7023e1c650cbf1b15b5188edcbbd3d825376dcd55ffdda1b
SHA512

4fcc67e302040d40bdf2fc4d0590ff807d4844eaafcc376f818461790f8fec2af51df53aef144613c930615f262db7e499007d83675b8373e34345fed3135f73
SSDEEP

49152:i4kGhwTYNKEBTZvsq8s02grKAjkJUh9PdwpqmTr7l7tfHm:YwSEzkq8s0lKakOh9PdCqsPl5fG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb1181175bec6cf0dd16ee194a52957f

Files

bb1181175bec6cf0dd16ee194a52957f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ