0abf144570146121f31317ada3bb3325 | Triage

Sharing

General

Target

0abf144570146121f31317ada3bb3325
Size

56KB
MD5

0abf144570146121f31317ada3bb3325
SHA1

d72066c089f1528c562c6c62abe377a1bc14642d
SHA256

31df818d3c845699c50b7cee5daeb82976e9f466d596082b05bd6930e76bae3c
SHA512

159701f766cea01c1db7a615e3dd5fa967044a2221391b7f55370c081aee65ac43d379c4e00ea456b4f04a5691b7c33f9be16d5c622364ef257600c508fd0be7
SSDEEP

1536:NKnCoTsBwllsHFIjl4WKe1BAVw04/SpIMS:NKnCoT8YlCmeWKgBAVT4/Sg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0abf144570146121f31317ada3bb3325

Files

0abf144570146121f31317ada3bb3325
.exe windows:4 windows x86 arch:x86

711b007bbe0e854417cf646c3f131ae9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
WinExec
GetProcAddress
LoadLibraryA
CloseHandle
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
OpenProcess
Sleep
GetWindowsDirectoryA

user32

GetWindowThreadProcessId
FindWindowA

shell32

ShellExecuteA

Sections

Amoeba
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE