151fa7846c01de1b3eed25c0add838de | Triage

Sharing

General

Target

151fa7846c01de1b3eed25c0add838de
Size

42KB
MD5

151fa7846c01de1b3eed25c0add838de
SHA1

67dc581891e1e2a20ffd7048b5453de0c1294ab0
SHA256

35eafb38ec88bdff52b0ed64f010e01a548891db70cd0abf1619801e67ab6b3e
SHA512

a743fa5adaaec206cd79f62381fe0350c6ccf9e5ebeffc652a887d2d153716bdd3dc5d9afb4a299967e9e606e6e8650958cb4d1d1eb5cefa20b3c55866768ac6
SSDEEP

768:ncp5eIfUQkW27SGMf2CBaKlU4VkYaiQWkbMam38nDedF7AIe:85NISGMf2Gi4SpbM3MnDeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
151fa7846c01de1b3eed25c0add838de

Files

151fa7846c01de1b3eed25c0add838de
.exe windows:5 windows x86 arch:x86

4a4392d5a9981eab09bb2116a8f31115

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

abs

shlwapi

StrToIntW
StrCmpNW
ChrCmpIA
StrChrA
PathStripPathW

kernel32

GetTickCount

Exports

Exports

?PathCreateBackA@121GPAUHINSTANCE__@@U_COMMPROP@@+Q
?PathCreateBackExA@121GPAUHINSTANCE__@@U_COMMPROP@@+Q
?PathCreateBackExW@121GPAUHINSTANCE__@@U_COMMPROP@@+Q
?PathCreateBackW@121GPAUHINSTANCE__@@U_COMMPROP@@+Q

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ