602ab33ac6cd5f3d5f4ea0ce96e05c38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

602ab33ac6cd5f3d5f4ea0ce96e05c38
Size

315KB
MD5

602ab33ac6cd5f3d5f4ea0ce96e05c38
SHA1

208f0dab0ef2dbf2cef483d19631b0171acc9fa3
SHA256

512910899759d9bd07fa8eea7dfdd10421f30dac0007d317ef221cdafcd65007
SHA512

1cc803784793f37c551749e86377c1e61846f55f134fdc4db9380cd0dd7069c74f29727d3f006ddd6304092c501564708de53f5fabbc95df0c3618b0f412e18a
SSDEEP

6144:WuhYpygHYpU5g1wDnday0ZCy6dgE6OI6ZBjBriwynRXi:fhYpdH44g1wDnoy0Ay6yE6r6LjBuwyn8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
602ab33ac6cd5f3d5f4ea0ce96e05c38

Files

602ab33ac6cd5f3d5f4ea0ce96e05c38
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

bibmnjfmxa
hhpfygbl
iijpuztxpuwc

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ