08505221286049ff7c2ee82f6ce570f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08505221286049ff7c2ee82f6ce570f6
Size

343KB
MD5

08505221286049ff7c2ee82f6ce570f6
SHA1

81ecfa29636a2353ba907d6e0f65ea4ac3a01cb0
SHA256

eadb8fd1a98f0fd96af6194af52557f6decde717ddf61cf6815f58d020ae3f7c
SHA512

70acd6fbe51a2014bcda82e645e5bb47575a8de25e0b4b62def5e76a86d13c4f45e89128525bc3d3850e27ea0360850a4b1556ddc76c69a66e5078027432fccd
SSDEEP

6144:ol5EGFmsj8EneDjtXxo2wuysfKujOZKuTX:k5ESmsj1alxomyspOKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08505221286049ff7c2ee82f6ce570f6

Files

08505221286049ff7c2ee82f6ce570f6
.exe windows:4 windows x86 arch:x86

ee73f115e4d9f5049f609d238590bc34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu

kernel32

CloseHandle
CreateFileA
ExitProcess
GetLastError
GetWindowsDirectoryA
GlobalFree
LocalFree
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 341KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ