0bbab60e41de5b6d1bd7c84f9f5c0c94ab2b69f555c14f2673f3c0130d1eaf35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bbab60e41de5b6d1bd7c84f9f5c0c94ab2b69f555c14f2673f3c0130d1eaf35
Size

229KB
MD5

981cbba3924268dc62d98548ddbd3f32
SHA1

f7dfd68524d85cecd48f5d46a778121106939d3e
SHA256

0bbab60e41de5b6d1bd7c84f9f5c0c94ab2b69f555c14f2673f3c0130d1eaf35
SHA512

39a667258c19956b52f2c09098be5cb6a2fa9a5d5b92f2fe689cae83c1818673e2d29216209d9f8f71b7e82b6569ab0179469f8d2a392309d72127c5b6182459
SSDEEP

3072:oTNkXHfvl0awuW22s1z/7zLou7YPUpUld9tSMsCNjqaoMrV2eEwSXsHA:o2fvloM1T7r7YMpRBMVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbab60e41de5b6d1bd7c84f9f5c0c94ab2b69f555c14f2673f3c0130d1eaf35

Files

0bbab60e41de5b6d1bd7c84f9f5c0c94ab2b69f555c14f2673f3c0130d1eaf35
.exe windows:4 windows x86 arch:x86

c14fd12a42197b7d3be032622b25f1ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetOEMCP
LoadLibraryA
GetProcAddress
CreateFileW
VirtualAlloc

user32

LoadIconA
LoadIconW

gdi32

GetStockObject

advapi32

RegOpenKeyA

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ