4308abb802a64b28a32b9b7f95cf4acc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4308abb802a64b28a32b9b7f95cf4acc
Size

155KB
MD5

4308abb802a64b28a32b9b7f95cf4acc
SHA1

e1ee7274eac3935aa1d3043c86dc4a7adff9fbe9
SHA256

5b4820bee5be22423087c715cdb24acee8e9041cca3ee8dd4046ce537b532266
SHA512

0798061411a2d3e9a3a72413cfbc52608d50052787b1b1b66d03096ad1df69a45aa7bb51038163fb4d426c7fb050e720e9d62b981e254e2a510726b065651d1a
SSDEEP

3072:Ey3Iz2TY38xUfUpQCMYddil6qn3lQl5k+F669DkYy:X3IzvMqqzPMuk+9hkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4308abb802a64b28a32b9b7f95cf4acc

Files

4308abb802a64b28a32b9b7f95cf4acc
.exe windows:5 windows x86 arch:x86

7a80edc3c679854f84495fd7e2c777d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

CorBindToRuntimeEx

kernel32

ExitProcess
GetProcessHeap
OutputDebugStringA
GetModuleHandleA
GetModuleFileNameA
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GetProcAddress
RaiseException
HeapFree
HeapAlloc
GetCommandLineA

user32

MessageBoxA

oleaut32

SafeArrayUnlock
SafeArrayLock
SafeArrayRedim
VariantInit
VariantClear
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound

Sections

.
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE