15f88b290c73a932fcc2ad3083d4c046 | Triage

Sharing

General

Target

15f88b290c73a932fcc2ad3083d4c046
Size

3.3MB
MD5

15f88b290c73a932fcc2ad3083d4c046
SHA1

d51baade124b35059111db7e1ec2124212bcb67a
SHA256

70da6997b55adcb8d30027b4f568eaf4ac7bc294d6563226b3ea7ea1a8b9fa48
SHA512

c9672a13cbcb411698965d8126bdea538a8d6db6d8a62a8d37692712b0b7dce48833d468f5908affc10b4e9bd1c8b172b15287f72daeb24edcca5dc6efb5e4e5
SSDEEP

98304:i+gRPJaOuXQVY5C8+occO0E2QdFXYU5kC7iIsy:eJhu+wC8LccXtQdFrkSi2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f88b290c73a932fcc2ad3083d4c046

Files

15f88b290c73a932fcc2ad3083d4c046
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ