0805f5182e57b7814f39824b23a4c240569d8bd458611e16df476f9f8e867714 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0805f5182e57b7814f39824b23a4c240569d8bd458611e16df476f9f8e867714
Size

44KB
MD5

a2219ecd529341240c961ccf3194d798
SHA1

f0a02eeb23f7c18f67b2770aff8a7caa57f12a97
SHA256

0805f5182e57b7814f39824b23a4c240569d8bd458611e16df476f9f8e867714
SHA512

d64648a62ff20034d7f62a54a41151b347551e313ad0f3fa60d2ce4078306dcb91463f0774fce4be2685a7fc92aae4951978f0ebb3dda6d4ec6f73cbc3c64f33
SSDEEP

384:FeofhVvENahBOCv19TGZ9UXv/kWJxGZ9UXvC5zaGZ9UXvSOo7QzFbZbs3vC:FHVENMMU9qZ9gvPcZ9gvUZ9gvw/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0805f5182e57b7814f39824b23a4c240569d8bd458611e16df476f9f8e867714

Files

0805f5182e57b7814f39824b23a4c240569d8bd458611e16df476f9f8e867714
.exe windows x86

b77e7030878776e3b7226088f0c9ab13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetProcAddress
GetModuleHandleA
GetLastError
GetStartupInfoA

user32

wsprintfA
MessageBoxA

msvcrt

__getmainargs
strcpy
memset
_mbsstr
memcpy
realloc
malloc
strlen
_exit
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ