a158c77606c6586ebc4cfe62e0faab30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a158c77606c6586ebc4cfe62e0faab30.exe
Size

1.4MB
MD5

a158c77606c6586ebc4cfe62e0faab30
SHA1

1e2dad96d54fda1d2919089474318481e30c4ce4
SHA256

a80c58c78f921d70c8a5ff4da58d5b7e81cfd9c165651092268e1eaeb03548c8
SHA512

91f33987d8e7883e79a4590d424dd5c89bf3c960f5242c38a1c7cfa0fd0134702f9ea57f31de1ecd57f118689fd508f5b221bdc2c7d7783da930ad362eb38dd5
SSDEEP

24576:f0w2sZFnwxfonTeZA9UIHip/Z7lgaPOHjuiZu/nKdNa1VuASb0wInuv0d25sPd3Q:OSnKobDHGx7lrPSjuiknKdYqEuvAFKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a158c77606c6586ebc4cfe62e0faab30.exe

Files

a158c77606c6586ebc4cfe62e0faab30.exe
.exe windows:4 windows x86 arch:x86

746c04dc90a219439dde8ef0679b4701

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateFileW
GetModuleFileNameA
GetModuleFileNameW
CreateDirectoryA
GetTempPathA
CreateDirectoryW
GetTempPathW
GetModuleHandleA
LoadLibraryA
LoadLibraryW
GetVersionExA
GetLastError
CloseHandle
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
SetFileAttributesW
GetFileAttributesW
GetProcAddress
GetStartupInfoA

user32

wsprintfW

ole32

OleInitialize
OleUninitialize

msvcrt

_exit
??3@YAXPAX@Z
sprintf
wcslen
_ftol
wcscat
??2@YAPAXI@Z
calloc
free
_except_handler3
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ