0601bbf81cb7ab4aa18a55d9086f636e | Triage

Sharing

General

Target

0601bbf81cb7ab4aa18a55d9086f636e
Size

61KB
MD5

0601bbf81cb7ab4aa18a55d9086f636e
SHA1

77cb5557dc22dba7d17959994914288f8c652274
SHA256

8fb843ba497dfa1f6020cd072322efd3260b8b284423631aeda1d8712288c878
SHA512

20dc5ade693ff65db105a91f76d97bb04efa41e3943b32d83a86645d9acb0e7d82ade725253b75496deea606a93284dda052dad4e553f93504bf54d4edc9ad50
SSDEEP

1536:xRw1zNZQaeG0wiIyZd2iQqGu4oyI2OxhAIMFsOIDT6dm:xRwlnQnG0wiIy4uMIrxTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0601bbf81cb7ab4aa18a55d9086f636e

Files

0601bbf81cb7ab4aa18a55d9086f636e
.exe windows:5 windows x86 arch:x86

2921615adfbb658d6aa0f35720b8f430

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetFileSize
HeapAlloc
HeapFree
GetProcessHeap
WriteFile
Sleep
ReadFile
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CloseHandle
GetTempPathA

Sections

.text
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ