a210cac405375970ccabbc4e5b8583470e8fa10153802269be13e6015742d80d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a210cac405375970ccabbc4e5b8583470e8fa10153802269be13e6015742d80d
Size

844KB
MD5

cda9b9c9cbde7b101fd30ec8275bb892
SHA1

f6183766051fce819cb3124e2717c29966d9cb5b
SHA256

a210cac405375970ccabbc4e5b8583470e8fa10153802269be13e6015742d80d
SHA512

c5d1c0dc51dc55afde9b8acda5b05b43b2efb161e9f2a451fbcad36d53247924ba66a6864ee1d071ad628134149d0c2f3f4b1e941d482e6df198f17e42067ebc
SSDEEP

24576:91Ot57DOqfROMTgYP4PMQ4y+eW+/0DEDDgHMLkqt:LOjDODyP4PMvyHn8QDDgHML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a210cac405375970ccabbc4e5b8583470e8fa10153802269be13e6015742d80d

Files

a210cac405375970ccabbc4e5b8583470e8fa10153802269be13e6015742d80d
.exe windows x86

e195a3f175e62fc969e161db93d9bc02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile

user32

wsprintfA

wininet

FtpOpenFileA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 40KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ