119749f6181e464d70b15af5c6e38acd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

119749f6181e464d70b15af5c6e38acd
Size

210KB
MD5

119749f6181e464d70b15af5c6e38acd
SHA1

2b8003707ec6982859d411517eabf34e428e8f0a
SHA256

73ef4cc852d17f783af0633448b337906cf8cbf031a5958c8aec22c76e66d586
SHA512

3f3047b381db2412a64f46f40f2e68ef73908b9eaee064e0b41347768e12b29cc6db44fbcbc64a18c40c2fbbf7b5418b6ddc89a0e8ddaabfc4428af9d8c1ddcc
SSDEEP

6144:ohGYzKMEvqldNO2uf7CJ8+2PZB4BG7fSGiI:oAYzKMOqb527Cu+2PCBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
119749f6181e464d70b15af5c6e38acd

Files

119749f6181e464d70b15af5c6e38acd
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ksbgp4op
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hcehfeou
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

w3es1ahd
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9s3kkxl0
Size: 205KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kyy7x3l
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ