02d9a295f5182335e7e89e73a55f08fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02d9a295f5182335e7e89e73a55f08fc
Size

734KB
MD5

02d9a295f5182335e7e89e73a55f08fc
SHA1

e658e25b8bb969c201948b28b4157c67f918502e
SHA256

3a2a4f2f8a680a3a0e7011e7084c6a852443c44c5a905f0c46313e2337c821e2
SHA512

1a90ba6514b3a2a30948d520cbfda76b8d09ea9e20a3469f5aecd87db5b09c0d13609cd1c3838f18c24ba92180c87dd4004f60f1684b2959537759d63dbd13ae
SSDEEP

6144:rl6YV8t7L/Q9NJjPutA0rSu8aE3y6tbFLZJvSzpEPbwwuYk22Pittq0ov8+e5j:rl6YVOiN5S+HaE3XBLiOjwwu722R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02d9a295f5182335e7e89e73a55f08fc

Files

02d9a295f5182335e7e89e73a55f08fc
.exe windows:4 windows x86 arch:x86

0e5e0c1695c9b390e2b7bc742131c3f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fread
free
fwrite
malloc
memset
printf
remove
signal
strcat
strcmp
strcpy

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE