2013ad4f905365b4438cd428fd253d21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2013ad4f905365b4438cd428fd253d21
Size

1.7MB
MD5

2013ad4f905365b4438cd428fd253d21
SHA1

6e130d89832335942ff5e8f2b6c5c83d5ec46c68
SHA256

11ffb6952ad7e37ab35f687a7c2c38353265d59789f48b813cb33be75fc6191b
SHA512

f1926e76e2f995f301ad076c98bcea7559132e0f1002dc9a1fdf06cb207b72237c6ffd2ac096d1f45e1f4d46d7e54ca970fcab9a53595ca7cff12c0efef0e369
SSDEEP

24576:1wC/OWAfles7KcSUF5bmLJBa8EG/qqy2a:B/ObR76UFBgJBlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2013ad4f905365b4438cd428fd253d21

Files

2013ad4f905365b4438cd428fd253d21
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ