296f5b37b48990d46b7253f9f132bf76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296f5b37b48990d46b7253f9f132bf76
Size

8KB
MD5

296f5b37b48990d46b7253f9f132bf76
SHA1

154f4bc0d621faac422729788651ae22d5811a60
SHA256

cb8b91b3fe2b3eaca471c584d22032332473a8e1a2bba679ab3368829370e2ea
SHA512

98a4577fb854d0fb5a2cc3d4140a100ed0b3de2eda47e74fbe91898527c0a40e28f13d1c530cb781ea2736660b5ce9847ca0e64504a9e9f0d35635cfda0aa4f1
SSDEEP

192:jdBxQ9maNfgNT3ojrc1HX6G6011WHUp0ZEs/gZsOxuFROnVSXW:jTsm8f6krc1HX6G6Y1eUpMXeuFROnV6W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296f5b37b48990d46b7253f9f132bf76

Files

296f5b37b48990d46b7253f9f132bf76
.exe windows:4 windows x86 arch:x86

239ca5b3390fc054550b238903980231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetVersionExA
CloseHandle
CreateThread
lstrcpyA
ExitProcess
lstrlenA
SleepEx
GetTickCount
GetCommandLineA
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
CreateMutexA

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE