afe64faac1c661b45d20a2c9bee200499bd28cdcdce5172be021b95fdf618a4a | Triage

Sharing

General

Target

afe64faac1c661b45d20a2c9bee200499bd28cdcdce5172be021b95fdf618a4a
Size

28KB
MD5

c294da149c7752ba4aef3cf476f9b472
SHA1

cef7c19d78091164ff411c9591a3dcde287fa643
SHA256

afe64faac1c661b45d20a2c9bee200499bd28cdcdce5172be021b95fdf618a4a
SHA512

e9123d8fdf4e55b1236c63b13b7a4840a7b29ecbe269c838c48cfc6e0bfcaed099afe0d7b96fa8ad977dbbd4b7173329102271fdc91d0b14f516e1c805f110f8
SSDEEP

384:ElvXHstNu59QxdUmlH+GyywiejwSoEFlJxO:ge+KdvyJiej/FFlzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afe64faac1c661b45d20a2c9bee200499bd28cdcdce5172be021b95fdf618a4a

Files

afe64faac1c661b45d20a2c9bee200499bd28cdcdce5172be021b95fdf618a4a
.exe windows x86

62712d090c8100403a0e9985db7b671f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
FreeLibrary
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ