04abb3cc0ea4bc0a7937ffc09b33aa8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04abb3cc0ea4bc0a7937ffc09b33aa8b
Size

210KB
MD5

04abb3cc0ea4bc0a7937ffc09b33aa8b
SHA1

6a0ace37d2d89e5a988d00bd84d883a31a94584a
SHA256

91dbe41aeafc7a0109ded7136a824906e42f2fff8e35ee58d6fedeb27f55825e
SHA512

cfc1eac3630ba81d78c2db017f7004c280296a461c83b7cd86c06e2554c128a6e3df461ce46612f7f09971caa425974e949d25ea35824c43b037c77c5890c403
SSDEEP

3072:Rq9X1ta6Far4xSi6m1qC26d6PpVdKAHjnFsLTeIfkEmj5P+gAOk:qXvaaxSi6RwdzAHjeLZpg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04abb3cc0ea4bc0a7937ffc09b33aa8b

Files

04abb3cc0ea4bc0a7937ffc09b33aa8b
.exe windows:1 windows x86 arch:x86

0f8ccfcfc5de207e02ae4a16cbe64cd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_ismbckata
printf
_controlfp
_acmdln
strpbrk
_creat
_initterm
_exit
memcpy
_mbccpy
_wperror
_adjust_fdiv
_XcptFilter
__setusermatherr
__p__commode
asin
__p__fmode
_chkesp
__getmainargs
__set_app_type
_wremove
_aligned_offset_malloc
exit
_except_handler3

kernel32

WriteConsoleA
SearchPathA
GetProcessAffinityMask
CloseHandle
MapViewOfFile
FreeEnvironmentStringsW
GetStringTypeW
IsValidCodePage
GetStartupInfoA
LoadLibraryW
GetModuleHandleA
VirtualFree
QueryPerformanceFrequency

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ