b0b0db6f02f828146405e94566586200N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0b0db6f02f828146405e94566586200N.exe
Size

70KB
MD5

b0b0db6f02f828146405e94566586200
SHA1

6ee71c0daf083d26177f331c7b0dd09e589bd654
SHA256

30653ba670be91af4f91859a59b858df726af86edf94bd214e037426f8844ce9
SHA512

a8bb7848c5ada8dcebed1c89b15df25909f40bb9ee4528532c0ec997bf2dd0a92dab639e7c4babfa91bc59b7eea6a1bf6e3ccb110fc95d4e624c646333ff99e5
SSDEEP

1536:xp5uTRwOmEbRd3vHiIYTJWo9KxwO+N2tbZg0grsIhASwcD0t:b5u1wOmqd3vHi8o9KiOAkg0gsIVD0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b0db6f02f828146405e94566586200N.exe

Files

b0b0db6f02f828146405e94566586200N.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE