bb32a4af1671fcb1063a2c5350df26de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb32a4af1671fcb1063a2c5350df26de
Size

1.7MB
MD5

bb32a4af1671fcb1063a2c5350df26de
SHA1

ac75a65b2575807c6c650a8dea34af6073108210
SHA256

2fc713799a2da8a7be162132a164e549dc49f4a1f77f3eeb2e5c9554da53de6a
SHA512

66a2b82400c219fdb996d880f830bdfc1879c0394506412edc655a6d09c09d6a21d139a8247ba0c594b00bd9e64ccf5c67d51d09c5595786b84738abac2e1ceb
SSDEEP

49152:A1OMNj79uCE6CPew92pDY6e8y/D9h3JquTbDBy00:DMJJw4e8y/5h5qmBy00

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb32a4af1671fcb1063a2c5350df26de

Files

bb32a4af1671fcb1063a2c5350df26de
.exe windows:4 windows x86 arch:x86

476f92c8f9ddbcb805cdc5c61fbc5635

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntdll

NtContinue

Sections

Size: 701KB - Virtual size: 701KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 863KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 12B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ