00d4a883c1be30ca60600a2b253a55a7 | Triage

Sharing

General

Target

00d4a883c1be30ca60600a2b253a55a7
Size

20KB
MD5

00d4a883c1be30ca60600a2b253a55a7
SHA1

0a251f05445ce2f7a730a3fe97a5ab08ab932c0b
SHA256

c643e1f2e22137d21e82c8a55f1a6b18a54880bbf0096be29747a0a54aec7e5b
SHA512

6b0c2d213f845a843292c5e223f6f8ac38a8a1c3ee1cff86114bf6019e84c3dbd89040dc4aa8d8129c812efb34a3cca147593d94aad16965173fab57d547eae7
SSDEEP

192:nMOO9uLu/2qyc2YF0UTp65w8XkU8ByrYAgt01DjtgVAYepFhZ8H3Tn:7ib5Fdz5U8ByrYNt012AYepFhZo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00d4a883c1be30ca60600a2b253a55a7

Files

00d4a883c1be30ca60600a2b253a55a7
.exe windows:1 windows x86 arch:x86

006c40839873a9704bbd963ef4620af9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellAboutA

kernel32

ExitProcess

Sections

CODE
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ