bbfbbaa898a8378ef72b279c496fa380N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbfbbaa898a8378ef72b279c496fa380N.exe
Size

5KB
MD5

bbfbbaa898a8378ef72b279c496fa380
SHA1

93e9e041848438c0822b44fb8043b4d876c5d891
SHA256

cb71557a2f952a4ed7f793595baa56e940e4496d91e1ad1b62f84dccd86ae9e6
SHA512

cac4d85d93b202e29c74bff8985960b0ffca5fef6f0e129f61b8fdebfa6505c90574e3191054f621a72523883b46e481f6110d58b3cef4df17af979adba81da1
SSDEEP

48:6BXWE159bU9uVF59Xw9uVF1t/w0lXBc5TW5pwyJc36ra8w6cf8xqr3n1ul/ryL58:6ZDXTPXA0lXaTMNraZ6cf8xS3YByL1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfbbaa898a8378ef72b279c496fa380N.exe

Files

bbfbbaa898a8378ef72b279c496fa380N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ