bb650a6a3baa36352cc7e5af8c799eb7 | Triage

Sharing

General

Target

bb650a6a3baa36352cc7e5af8c799eb7
Size

52KB
MD5

bb650a6a3baa36352cc7e5af8c799eb7
SHA1

e2efbf7083f59407df8c0db533ecc263b065c7ca
SHA256

f832cf4eef0b58431a0c648300bdb2a2cf70fe5b7aad301752f4240f269cf435
SHA512

11ed90de346b578e779a70913ec8f3073ae3c809e2d46b05a7a1a4aca9f42fb3cda0125bf4f05d91b2c29898da5e1bdb55dc27e26bb465a2fcf10f5f9c54ecfb
SSDEEP

768:YwrH+iN27nHaSORXZCUMh4AzNI+BGxYnjlDusjc99+rCjo0/0b2xaqMoNBrsBGdu:YwX2rpOcuAzG+Uxmjlc9o2Uqrsmcxpf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb650a6a3baa36352cc7e5af8c799eb7

Files

bb650a6a3baa36352cc7e5af8c799eb7
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE