bb68ba54f4a4f973d6eb071af91531878ed3083513e980732979464d4e742e43N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb68ba54f4a4f973d6eb071af91531878ed3083513e980732979464d4e742e43N
Size

63KB
MD5

e51c3a31f480826c88975d4b0b81ce70
SHA1

6540c40e4a79122452c00a81f909f22f96c67014
SHA256

bb68ba54f4a4f973d6eb071af91531878ed3083513e980732979464d4e742e43
SHA512

23cc9cdd717a4d13555378cdddf01e6f9d29300cee21f06eceebd03076eb57557d2c4392a5079ee7d9d9f263fe2a99ddbbfd085098215f40938e58c55ed41215
SSDEEP

768:1UfiwHgh8yEH/qs9be+7nyzXjHantS8YzXB3f7F5s3LpPYCKK1iz15OddsY2n:1Ufiw+85C2be+eTYUFrp7F5s7iF1H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb68ba54f4a4f973d6eb071af91531878ed3083513e980732979464d4e742e43N

Files

bb68ba54f4a4f973d6eb071af91531878ed3083513e980732979464d4e742e43N
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ