UserOOBEBroker[.]exe | Triage

Sharing

General

Target

UserOOBEBroker.exe
Size

105.5MB
MD5

3ffa9625fdd39b7160430ec903cd2688
SHA1

2b07febc39ca067b234c1ab574477e459f1574af
SHA256

55268bd92f0f5ed2956d2e5a4cf0f583fd1036197be092c24236d5761752a6ed
SHA512

4e33c44c2e0a7c053c66c378a247ac48787d2f4de00316809d4619b9f09e302d6f0b34a1609667a820a568c2287383290dee8720d80470cc01c9e8d30fddeb9c
SSDEEP

786432:G7aJ7vCmorl0yxfYkyQdBFrJJSl62HjeqHUQvvozHjrxjLmSYbnk6Kno1hiX:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UserOOBEBroker.exe

Files

UserOOBEBroker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 105.5MB - Virtual size: 105.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ