133aff0abdd586dab42208f6fe67340c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

133aff0abdd586dab42208f6fe67340c
Size

439KB
MD5

133aff0abdd586dab42208f6fe67340c
SHA1

8da24d59d3838e562f867430a24a35c4931f1bf0
SHA256

75e501574b50a8d0d54afd3f194ebc574faee8fc1a9dd77e12723da5f8c382ed
SHA512

4bbfa65a84574be98996d7ae4bd79fef336400ab0994262f0d5f80956e7452182d61eeeaae7e300fb868aa34e1456a689503bd652f59caa5feb8f72cc1f07d4b
SSDEEP

12288:gYhCgoNLcLV4SOF999jfbG+G6saX9Rwt3E5gi8I6D:5aNWV41NjTtxffGIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133aff0abdd586dab42208f6fe67340c

Files

133aff0abdd586dab42208f6fe67340c
.exe windows:4 windows x86 arch:x86

8e047aa2b4bc0bd6b5f157169a5cc64f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetSystemDirectoryA
WinExec
GetModuleFileNameA
CopyFileA

msvcrt

exit
fprintf
fclose
strrchr
fopen
rewind
getc
??2@YAPAXI@Z
putc
fseek

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ