bbbfd20fee5c1f4f8828a1b0ed6c9b06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbbfd20fee5c1f4f8828a1b0ed6c9b06
Size

512KB
MD5

bbbfd20fee5c1f4f8828a1b0ed6c9b06
SHA1

480bc16c97a0af57f8e013bc3f1de7766d41ee0f
SHA256

9c8c86bbae4b1ceba72dd85ea99e66ac81279e369fab44d15cf2260a31298688
SHA512

d42250639682c7be51b072f152f404a12ac697fc49d8714fc9fcdf1b13d267c5142ba5613ca2f8bbc5dd283557576f1dd622e11f459d5fd26576dbaba477e9e3
SSDEEP

12288:tsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQ4:tsQsQsQsQsQsQsQsQsQsQsQsQsQsQsQY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbbfd20fee5c1f4f8828a1b0ed6c9b06

Files

bbbfd20fee5c1f4f8828a1b0ed6c9b06
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE