bb30b9a67ff89d8ce12edb6bbac97b7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb30b9a67ff89d8ce12edb6bbac97b7f
Size

252KB
MD5

bb30b9a67ff89d8ce12edb6bbac97b7f
SHA1

0614b95209657e701b0cbe2675d44872f746a2fb
SHA256

77e1324952ae8b706a23b0c4e911ed81a5d5107fd3de93f52ddd52b10007ead0
SHA512

e7ea761c5022850316a883134028860e8c1ec98663ddc7973d710976f4cd45245aafbd70e7ceaea88158c1533c91fa5f702b94c2652d0b8fe22e72f94c77779d
SSDEEP

6144:/cuDEFwUWRDezeJgRvxUceihnGSGVxHd7uGQ:kuDEFwUWRet6onGZzHRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb30b9a67ff89d8ce12edb6bbac97b7f

Files

bb30b9a67ff89d8ce12edb6bbac97b7f
.dll windows:4 windows x86 arch:x86

69bc3cfe7cca88bb521c0a3a5dc537fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

FindTextA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA

msvcrt

memcmp
clock
exp
mbstowcs
wcscspn
fabs
acos
tolower

kernel32

VirtualAllocEx
GetCommandLineW
GetCommandLineA
ExitThread
IsBadReadPtr
lstrlenW
LoadLibraryExA
ExitProcess
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
IsBadHugeReadPtr

Sections

CODE
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ