fbd0ac9ea3985409764526f307675977 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbd0ac9ea3985409764526f307675977
Size

57KB
MD5

fbd0ac9ea3985409764526f307675977
SHA1

028359db6bd68cd2b5ac2711c23641844cc08313
SHA256

e02bfd67dd9f2ec8894c88c0a969154addff641353b644392d014f49582d4daf
SHA512

f921361154d53430a4b217648022cf85904d9fa8421f17f0b49b3ce334cf3d6d13bf2572d9d5fe594197dd7e39807cfa9c24be3226e14fb40898bdb75414abb0
SSDEEP

1536:/AzjRpngfsaHv3eJe1oN4ck4iOj3SSLt4pSXU:/qRd9+vzDJOj3pt4AXU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbd0ac9ea3985409764526f307675977

Files

fbd0ac9ea3985409764526f307675977
.exe windows:4 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ