bb20357e4e8b09199cb1ed4be4be9ed5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb20357e4e8b09199cb1ed4be4be9ed5
Size

67KB
MD5

bb20357e4e8b09199cb1ed4be4be9ed5
SHA1

160a32f0577f1ad090c6dec3095e2fca195958d0
SHA256

9f79af9b421167b33c0cc8a3bd9776ae11e98cce0a7bbd5701a52852a44198e5
SHA512

58602877fa45ae6164d755bc71abe0d2943ad0377c51c5edaf281f36f1f92fa4ef50d33c7ce57340b835811554d2c9f1e7c79164528d255f61d15c8e4255e33c
SSDEEP

1536:i5XmBurxSrPFhvSpCZ1XnS12mctTYbBl6gaghT+Q39:ilwutSrPFQpCZ1XnIctTYbBlvaKT+Q39

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb20357e4e8b09199cb1ed4be4be9ed5

Files

bb20357e4e8b09199cb1ed4be4be9ed5
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

_CoreVersion
_MemoryManagerImport

Sections

CODE
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 185B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

JCLDEBUG
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ