d00b19bd2e763b928e28ce16d7116320N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d00b19bd2e763b928e28ce16d7116320N.exe
Size

203KB
MD5

d00b19bd2e763b928e28ce16d7116320
SHA1

9bc94ee4169e35d4e8bb4607106eaac8ba1b97a5
SHA256

980868afd75dee42aff51771c994e7903e6d1a74d755487bc74b61f52c7c369b
SHA512

835c52111431c8b51ecc848ecb718d873924246e7234ee11b9894f1b3418e7ce0b875f4d90b416bd5bf3491d3a58fcd5000606d7242ae900ea316c110f29b347
SSDEEP

6144:grW/2QVVmeKv8bjR/aHmcEuUmeB9lLZ9gzQV:cWexeRvdImbHVgzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d00b19bd2e763b928e28ce16d7116320N.exe

Files

d00b19bd2e763b928e28ce16d7116320N.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 195KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mumaba
Size: 29B - Virtual size: 29B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ