b13b296b76015f72f1f1cba42f8f1c80c33f22023e50f7a18848269f82b32b1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b13b296b76015f72f1f1cba42f8f1c80c33f22023e50f7a18848269f82b32b1b
Size

65KB
MD5

1d2c4fa70b5b02175d08bcbb23dad5c7
SHA1

cedf875b59b974f2e5a6129dad5a8110e0af6fef
SHA256

b13b296b76015f72f1f1cba42f8f1c80c33f22023e50f7a18848269f82b32b1b
SHA512

bcfd04471e795dd452c1eafef7d290620dfa996b97dfa27fe01868c16415efdb0d6ec3364eda409172118b44d1b23921794e952a0c1d41548eb85bb65849b1c3
SSDEEP

1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oudxixixixixixixixixiu:7WNqkOJWmo1HpM0MkTUmut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b13b296b76015f72f1f1cba42f8f1c80c33f22023e50f7a18848269f82b32b1b

Files

b13b296b76015f72f1f1cba42f8f1c80c33f22023e50f7a18848269f82b32b1b
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 49KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE