a3fc2fb3e9f22a9f7b2b14bbce7c4b349e9fbdcfce0c100a674550241a246aef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3fc2fb3e9f22a9f7b2b14bbce7c4b349e9fbdcfce0c100a674550241a246aef
Size

6KB
MD5

d4653b79744491ce2bf62813a1513938
SHA1

d122829618043b058676038b9a1a2a89c599530d
SHA256

a3fc2fb3e9f22a9f7b2b14bbce7c4b349e9fbdcfce0c100a674550241a246aef
SHA512

86377bd4e9580f0e298db4bb1ca5fd8d62db44d9d7bebd5d32ae2986041d7c4d6dd53a3514a1ecd43082f18970b22c556b9006d4d310f2803934248cab1fe541
SSDEEP

48:Skbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uMO:10mIGnFc/38+N4ZHJWSY9FI5Wqtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3fc2fb3e9f22a9f7b2b14bbce7c4b349e9fbdcfce0c100a674550241a246aef

Files

a3fc2fb3e9f22a9f7b2b14bbce7c4b349e9fbdcfce0c100a674550241a246aef
.exe windows:5 windows x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ