0004a039e427af3a91c34b5bc8fddcd9 | Triage

Sharing

General

Target

0004a039e427af3a91c34b5bc8fddcd9
Size

12KB
MD5

0004a039e427af3a91c34b5bc8fddcd9
SHA1

841e453724a1f2ace838d508ba198e5ecd1fdfc6
SHA256

53e2faa0dc2a2ca217493de9dfc282f73e1bead1579d756ef515207ca1816397
SHA512

cbfdc2d2b6ba2a0a49259104d9bdffd2b392d3456c53f60a00a7d886f6d9c94b77b95312b9be75475a3aaaee91e6c8071feb1de2b23f0e750cf80c97c7d06eb5
SSDEEP

192:SquCZnhlXCJmLPu4xUyDq7K18uTn3YA1DEQshqZYwxrQXBich:SsTCJY24Ky27KZn3zAQs0ZRsich

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0004a039e427af3a91c34b5bc8fddcd9

Files

0004a039e427af3a91c34b5bc8fddcd9
.exe windows:4 windows x86 arch:x86

40dd9795c366126c9377023f58788c99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
GetTempPathA
GetTempFileNameA
DeleteFileA
lstrlenA
WriteFile
CloseHandle
Sleep
UnmapViewOfFile
ExitProcess

msvcrt

memcpy
_spawnl

Sections

.text
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE