02f3d1569c176929b1a04459118cf1af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02f3d1569c176929b1a04459118cf1af
Size

352KB
MD5

02f3d1569c176929b1a04459118cf1af
SHA1

946600ff5db97a357952b6ab70a9b8b59020f0c0
SHA256

348a368a2c93a06e45dfa38c062ad7ca846c444e670c2918c70c845613643745
SHA512

be1e87bea5a48818e34b3ba14c6e58cb0a4a026460914edb10007f0e4d5fdc3b136af066a58c699751c2734095cacd07e337e8800756c97ba6828ee5db12bba2
SSDEEP

6144:oe8sf5zqOmcI/TIWpoSILeEsHHf3vNYNe3IuCT8+ok/jN4fS9TAWZn+8g1vVrZ:oe8sflrn58H/lkeLW8+okrN46yWZwVrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02f3d1569c176929b1a04459118cf1af

Files

02f3d1569c176929b1a04459118cf1af
.exe windows:4 windows x86 arch:x86

145c05f12031282dcc32a0c555d1be75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memcpy
memcmp

kernel32

CreateFileA
CreateNamedPipeA
DisconnectNamedPipe
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
ReleaseMutex
GetCurrentThreadId
GetNamedPipeInfo
GetMailslotInfo
DuplicateHandle

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ