485b60b780a3027309c26d66526e76f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

485b60b780a3027309c26d66526e76f2
Size

102KB
MD5

485b60b780a3027309c26d66526e76f2
SHA1

55485c766dcc533e14a48c03654f677162a95d29
SHA256

e64da900c1028a6b02b01d535d16cc91d62fe8d5b187472973f3c81fc682b31c
SHA512

73d916fe00fd4becebdaffb95d6012eab27de15f7b6cecbff75e1584f7cd7895561fd629ef752f4a54786bf53b52070204e02ac53b8f5010f66732766fcca8ec
SSDEEP

3072:MaHvBo3eNsPmRKnHAUVKtV8HXjrK9ZeFrvJd:7vBo3QemRKgUViGjriwZvn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
485b60b780a3027309c26d66526e76f2

Files

485b60b780a3027309c26d66526e76f2
.exe windows:4 windows x86 arch:x86

b8708e09cc933b4944c259d91619ecc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetModuleHandleA
GetCurrentDirectoryA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ