b00c5426e9a08c775348eb5478491d00N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b00c5426e9a08c775348eb5478491d00N.exe
Size

4.6MB
MD5

b00c5426e9a08c775348eb5478491d00
SHA1

811d7b0bf9572142f62638433015c718603f88d1
SHA256

d9808a96a5e11bdec93a30a6f710bf6908fb4cd562f3deb62bd42a9c0b6b5c6f
SHA512

6fbdeb028725b2262793d25844c2bacf0317d86d4fd124f86efa084f5189fc82f6ab88d08bd44b63e4f1d9caace1e4bbb7a0d68b1e05dcd6c3baa4e22d66b33e
SSDEEP

98304:2u6vOjpN0H3zgdXgK3c8iBxFs2iqkyyMtFHzkYhAxcikKql3Wu:5Bpm2R3ZEtpz5ATkK63l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b00c5426e9a08c775348eb5478491d00N.exe

Files

b00c5426e9a08c775348eb5478491d00N.exe
.dll windows:6 windows x86 arch:x86

b4ca6f0ad0fe5ce382aa3bee0f2fba93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Exports

Exports

_SbieDll_Hook@16

Sections

.text
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.h@n
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

./=A
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.>q]
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ