fa6a0199c1f29e798e90e34bab865b92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa6a0199c1f29e798e90e34bab865b92
Size

55KB
MD5

fa6a0199c1f29e798e90e34bab865b92
SHA1

6ab99b7ca6793a3f2df8832aecadf501f9cbeb60
SHA256

09e9a1db48561102e1acf53d594859e416d362c4656ceb865fbcb28d1712fadd
SHA512

5c488ce9a7781c2e50561dd1cbcb53eb02ae476d46e6da2216e8ede5aab47a269a3f6aa21275abc2e24bc86a75922048615b70fd8a29abc6fbd58ca0bef006ea
SSDEEP

768:63fP3rKcTw+lqvdu/c+7BLbC4kzSk+WdXpfmjxrvHREtvk2MMLpq:6vD/wZvdGc+tPC4kzx+CqxDHIY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa6a0199c1f29e798e90e34bab865b92

Files

fa6a0199c1f29e798e90e34bab865b92
.exe windows:5 windows x86 arch:x86

9b2471e86bd8d2c58452a97f9e30e58b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
HeapAlloc
VirtualAlloc

user32

EnableMenuItem
GetMenuState

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT3
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ