3bb3f013f073fda055047870f44e5150N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bb3f013f073fda055047870f44e5150N.exe
Size

125KB
MD5

3bb3f013f073fda055047870f44e5150
SHA1

b48bfc2b486dd80e4787c42ba1491d1121d4af2e
SHA256

5f6091c976b6bbac4e5355415955c2133e6c04af61541beb1a96739c6c61083a
SHA512

1f87f316bf4bed7c1d263c25deb497afaf3300c1438327b0ac0c61b9f066c6419c751998b42a509fa2f7a819d4419860437940024df12c90f666438d1abd9fcd
SSDEEP

3072:e6xTDEBXEDWNGW0ikaHsLe9ybkNm/qqKuwHrEleuM:e6iE2GWdkuybkY/qqDeuM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb3f013f073fda055047870f44e5150N.exe

Files

3bb3f013f073fda055047870f44e5150N.exe
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ