109def06cc80f401a522c2f032130df2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

109def06cc80f401a522c2f032130df2
Size

13KB
MD5

109def06cc80f401a522c2f032130df2
SHA1

4bffbb8f481687c821445c065f46b974ece07c70
SHA256

cb8b404a3f93bee4ae42acf49197c6e4d5b7d3ce25ccc247b2189b0b7781c5cf
SHA512

83ef184a16aac60480890e631593b1a6ea0b555cd0e6b26ac2180fcb1081ee8858e5824b30203cb773bb733b56d303e80c1e9752f432990ca27cfefc2e2b7cd7
SSDEEP

192:1mV64G1UON9N5UUEBPDW9M7L6mXzB9AruZd+EmrUJkq8l:1EWPnUJDfLvXzB2ry+LUr8l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
109def06cc80f401a522c2f032130df2

Files

109def06cc80f401a522c2f032130df2
.exe windows:4 windows x86 arch:x86

119ba01abad812c4a461368344bcd6cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.pepsi
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n-coded
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vrs
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE