183eeac75003506628d21464d30b746a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

183eeac75003506628d21464d30b746a
Size

3KB
MD5

183eeac75003506628d21464d30b746a
SHA1

228ab7ed3c952b752b119d19a0484a4feac187fe
SHA256

79f2d5c2c5807485eb6bc4530849242d7e3a9372c07c65cf7bfa3fb6b6428649
SHA512

a6a06076457116540c50c77c6cc1b56ae9050d516f24d8cca1006abc6a7a37901f822eb00d087074c539bd3f2adab01392d1309f1e60ffe2aa585e657087f068

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
183eeac75003506628d21464d30b746a

Files

183eeac75003506628d21464d30b746a
.exe windows:4 windows x86 arch:x86

505aab5781891dd891a2be86f1a895eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset
strncpy

kernel32

GetModuleHandleA
HeapCreate
OpenProcess
GetProcAddress
LoadLibraryA
CreateRemoteThread
HeapDestroy
ExitProcess
VirtualAllocEx
WriteProcessMemory
HeapAlloc
HeapReAlloc
HeapFree

user32

FindWindowA
GetWindowThreadProcessId

Sections

.code
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE