faa19ffab269f195a20d76c520c74fc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa19ffab269f195a20d76c520c74fc9
Size

133KB
MD5

faa19ffab269f195a20d76c520c74fc9
SHA1

92fd70d93367d6bee4f3cc4ef884d8e715c00608
SHA256

b0cef61fd74aa06bb0f60d9f2080e57106e52dbbeb986d4384b581150111acd6
SHA512

46d1e2a7f046179d8b7294e1df7439e34db5ef2caca4c846c20ee257d1a52e9e6a53a9bb45986901209bcd7588b83f20c90b76bd8a0b7ea7aca570243c6d75c9
SSDEEP

3072:mxy0Q1l5iCPSKj9nRtoFY33iQf1I0cXEwNpzo9MoFrU:mxEiDOyG3iC1Ix/zo9fr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa19ffab269f195a20d76c520c74fc9

Files

faa19ffab269f195a20d76c520c74fc9
.exe windows:5 windows x86 arch:x86

3884b90b28519d576cfcf9865cfe8511

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ord29
PathCompactPathExW

kernel32

lstrlenA
LoadLibraryExW
lstrlenW
GetModuleHandleW

Exports

Exports

?SetupReference@[SXH_KK]V

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.piano
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ