33ab7e3484ede7fe97cdfe9046ac538c | Triage

Sharing

General

Target

33ab7e3484ede7fe97cdfe9046ac538c
Size

40KB
MD5

33ab7e3484ede7fe97cdfe9046ac538c
SHA1

793513be294a03acee57e1da98b98eb0c8a0afbe
SHA256

8f7cb4523f66804ab91d3b0f2600ef45d2e95933255fb35cc785aeb2ab179d38
SHA512

e556e8e37bcdff671915fc86365b9d7559411a6d36a5a0dbc12d775179a177e46133e3cbd18fff683a4d0a00dd5250387ea09f62eec0bb4cdcf467ad411c3ddb
SSDEEP

768:lYDISZ8yNqTxQu+o0ekMGYG7k/Uagq8ONOskXUFNXL0e:gxWh+lekMGBTagq8ORb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33ab7e3484ede7fe97cdfe9046ac538c

Files

33ab7e3484ede7fe97cdfe9046ac538c
.exe windows:5 windows x86 arch:x86

803aa9ae1c8f91e14393d92c8f703a66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
FreeLibrary
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.extra
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ