af7a4d817240d28a64cbf53e8c9600e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af7a4d817240d28a64cbf53e8c9600e8
Size

20KB
MD5

af7a4d817240d28a64cbf53e8c9600e8
SHA1

def7e377b8eb97cc9e2ba25ddb551db9ab5e322d
SHA256

958e4ce1fccee400fb3805df44e153433a2ae6b5d1ed8c171644988b8edc176b
SHA512

43f85c14e74e3592c9e9bda4a31fbc5d84c0a985467b083ba0620c0dacbc51f0f837f9fbce801e8da181350b90a9a09206ce5b89dc2e263185a83525c66a3c1c
SSDEEP

384:SQ6rb8OtRUUWe0u3D7dwA/t874oBNM/4jNqBmNiniNUxp3+Z6a:ShffUUWe0YDdi79NU4ZqBmkni+x8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af7a4d817240d28a64cbf53e8c9600e8

Files

af7a4d817240d28a64cbf53e8c9600e8
.exe windows:4 windows x86 arch:x86

d8830768e26d5542e5a19dad95d6bbc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
ExitProcess

user32

FindWindowA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE