bb9ee8b3446e6d90f5c66d5b2ac5a958 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb9ee8b3446e6d90f5c66d5b2ac5a958
Size

130KB
MD5

bb9ee8b3446e6d90f5c66d5b2ac5a958
SHA1

25def94076b10bea91e28aa424ac33541d1139fe
SHA256

07f5729cd4740bf22992ba4582d42ca2556c9bd8802ac95fbb3c54c5102d5fe6
SHA512

24dbd2927bd8094ed9136ad524ba422827e1d77e748affa48f5c6645ddcdccdbbc8319ef4b91a6f3ff6187f82a86c5854e1029deba5b394195fde583e32942ca
SSDEEP

3072:QvFS6BVvxLR732QxVYJkGtHCnOs280Bl2VMd4vOoJp:wFScvplBOCnOsiBYVMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb9ee8b3446e6d90f5c66d5b2ac5a958

Files

bb9ee8b3446e6d90f5c66d5b2ac5a958
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 124KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE