496888c25c68da48c4e3f9a4ef9a3ddf | Triage

Sharing

General

Target

496888c25c68da48c4e3f9a4ef9a3ddf
Size

824KB
MD5

496888c25c68da48c4e3f9a4ef9a3ddf
SHA1

0c6478d01af3b9642013fceca0ed212ad4f6594a
SHA256

d480efc801b92db4f4ae3eb45c1f7047b480808d036775b1ade26aa27fc3d4b5
SHA512

4c9c063bb7024ae29ffa7e247a8d7a3b09996500343a7305f315297f41c4054001311171d6b0df42195953e01987875f91ddfd1fcf4eaaa6f1ee5c535f3b29c8
SSDEEP

24576:mF2QVOArcsxVCJPPILCqEJXaedtOCLLLLLLLLL9LLLLLLLLLoLLLLLLLLL9LLLLx:QVOLPYLhEFprK5RV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
496888c25c68da48c4e3f9a4ef9a3ddf

Files

496888c25c68da48c4e3f9a4ef9a3ddf
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 781KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ