1278db27298a256045766ad7f02331e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1278db27298a256045766ad7f02331e4
Size

47KB
MD5

1278db27298a256045766ad7f02331e4
SHA1

98e0640b927417c5c3e0db818f4bb9a039a6a46d
SHA256

d48b1ae9d1664e459932e2b20c90e2ab4a3d5731f1e36d3bc249da97282d466e
SHA512

9fd33e0cb298ff4a1c55ecd4fa60b5b6a12d145cdfe6f6b64d163513214d568be556448a978751dfda0975e09045fe98e4405a3aa2a3d09d781079538b31dc0b
SSDEEP

768:/y7BC5hn39R3cMACp1zPT5lD4gUD1cxudGvll3V+vMGyayDYAG10ilWYG+EvRpC:/iC59DlvTH4vicd0ziM5UiZYcJpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1278db27298a256045766ad7f02331e4

Files

1278db27298a256045766ad7f02331e4
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE