af389e70137c932fef90f992a48b86c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af389e70137c932fef90f992a48b86c0
Size

68KB
MD5

af389e70137c932fef90f992a48b86c0
SHA1

0a6e91593099177b9cb61e45f0a178e868c60f92
SHA256

0adbd59b8289751fa46ee0e5fa3e15b2aca623ac5346f9616f88a9961bcdb817
SHA512

40e9c32b21eb10873371ac10f7f37f17c59db3f45b004980dd972697947fa4df27186dda3823db2c1161c3a7f1eb670ba52d3a7948dad20717168c2efd0ff5e6
SSDEEP

1536:f3XXiAx+eW0aehUrlYE/Db9ctarq1h2TZ+4:/X38eVagwSt+tN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af389e70137c932fef90f992a48b86c0

Files

af389e70137c932fef90f992a48b86c0
.exe windows:4 windows x86 arch:x86

d8830768e26d5542e5a19dad95d6bbc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
ExitProcess

user32

FindWindowA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE