143bdda6102d8904cc6e414f3d759a275673c106b88f3f4c7ab0368b19fb1426 | Triage

Sharing

General

Target

143bdda6102d8904cc6e414f3d759a275673c106b88f3f4c7ab0368b19fb1426
Size

14KB
MD5

7aa73ed20481485b8c2b215097aba27b
SHA1

84854183d821e66c514808e16b4b671b8aa2301b
SHA256

143bdda6102d8904cc6e414f3d759a275673c106b88f3f4c7ab0368b19fb1426
SHA512

29be64b20b421edf3376bbc3aa43580f1ee2672c565881d0ce2c667b053e494944beeea59b576c8e76ce7aa156102850ddb9d987ab51afdb0a95e69996b2f33f
SSDEEP

192:aOcrEQ8XZGMxpJSwZCbP3TSEmZH46A3CzYWu58u51Yxlghs3nnnnnn+:poELIeMNmXA3CzYd5r51Yxyh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
143bdda6102d8904cc6e414f3d759a275673c106b88f3f4c7ab0368b19fb1426

Files

143bdda6102d8904cc6e414f3d759a275673c106b88f3f4c7ab0368b19fb1426
.exe windows x86

0492baea297996815693da7f4b834882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
DeleteFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
GetCommandLineA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA

user32

PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA

msvcrt

rand
strrchr
malloc
realloc
_ftol
free

shlwapi

PathFileExistsA

shell32

ShellExecuteA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ