015b4806f0201d74be46c39b2c43a2fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

015b4806f0201d74be46c39b2c43a2fb
Size

26KB
MD5

015b4806f0201d74be46c39b2c43a2fb
SHA1

7d65587b16cec7473efbf02e0f5316b3071d6e3d
SHA256

006f54a40843a2b4c0b75fb68f952ecc6d3e1ceccab34f242565469e8347c4b5
SHA512

8bd37bdc71e32d7a9c6d1e165189e39f192c5efaff5faffdb4e3268a062ff9f293f9262710a9dbc2dffcf1033de0474da75d0cd43b3ef3deb20633b1b510b121
SSDEEP

384:TZkVzd7rBG0OvImwIjH0sodEkjgW9YsCziHe8XOZdTzO6RINpWJjgNQWXYt51iwZ:TSP0EEkjN1HBXZyxU9X5hy3DlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
015b4806f0201d74be46c39b2c43a2fb

Files

015b4806f0201d74be46c39b2c43a2fb
.exe windows:4 windows x86 arch:x86

e3277f5cee0aaacd2fe3821f84454922

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
RegisterWaitForInputIdle
SetHandleContext
GetFileSize
CreateHardLinkA
GetConsoleAliasExesA
SetComputerNameA
GetNumaAvailableMemory
GlobalFindAtomW
LocalFree
IsBadWritePtr
SetDefaultCommConfigA
lstrcmp
Heap32ListFirst

user32

BeginPaint
UpdatePerUserSystemParameters
CharLowerBuffW
DlgDirSelectExA
PaintDesktop
OemToCharA
GetMenuContextHelpId
CharLowerBuffA
BuildReasonArray
DeferWindowPos
SendDlgItemMessageW
IsIconic
SendNotifyMessageW
CharPrevExA

Sections

.text
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ