b0f57672609cf4054cec369ddaaef80828b22d795cf7167cd4753b11c8443e9bN | Triage

Sharing

General

Target

b0f57672609cf4054cec369ddaaef80828b22d795cf7167cd4753b11c8443e9bN
Size

2.0MB
MD5

7746e382a0575438e649f3e05898f730
SHA1

b34b998f4c48dad9d81e669017f5eb4329a053e7
SHA256

b0f57672609cf4054cec369ddaaef80828b22d795cf7167cd4753b11c8443e9b
SHA512

8edee9600d74bd937655b6fb5ec3c18c527bfefcd5cd82762652b53dc6308cccb2148cae3d172c1a697a4570d75e0cd8474a0c596b2890cd8d5037cfca082eef
SSDEEP

24576:6YEpGRA+QTEXXzUAXzssF1MIi89e01wEcWaDTqaJT/XC0I:6YHpXXDs/UcDV00I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f57672609cf4054cec369ddaaef80828b22d795cf7167cd4753b11c8443e9bN

Files

b0f57672609cf4054cec369ddaaef80828b22d795cf7167cd4753b11c8443e9bN
.exe windows:4 windows

62219dbedd47f9c9413690207bb95a0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetForegroundWindow
GetCursor

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE