151a774c517a76996c7814c6ebcbda75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

151a774c517a76996c7814c6ebcbda75
Size

199KB
MD5

151a774c517a76996c7814c6ebcbda75
SHA1

22c6c723b44b64ba041052b78f79de0f603854fb
SHA256

f11702194755b362fdccbbfc3f7587a243cf1c55a07575314d7651e4627b8556
SHA512

4157cb6f2bafbc653b3df0e4d5a226b1fa081765574fa99bd36ca331c282b00fb1492994d8084c4ab1c38fb33cf529eaf28653a3cafe618b37a9216783a3cf3c
SSDEEP

6144:GBcW1DLJ901hSmuO8XXGZefZA4vMbinanUgPSOJLp:GBcW1Df0jSmHkxAQMb0+SOJLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
151a774c517a76996c7814c6ebcbda75

Files

151a774c517a76996c7814c6ebcbda75
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

euikpbin
Size: - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jb18.5h2
Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mzo.y1gb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ