0af1b4c27470a990a1d898bc0e2ea530 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0af1b4c27470a990a1d898bc0e2ea530
Size

4KB
MD5

0af1b4c27470a990a1d898bc0e2ea530
SHA1

2a3463359a360640207d451f3714735042a886e3
SHA256

2eb422fff57868de4a7e139a5db21e33f27055a65c80cff3bb1c33166c9d70b4
SHA512

4b303eebb668764c3b93f2ef4159302e1fe42136f713f297f688ca3abac22c6d7c762911c59501c95f75b58c7d7baf4dd19a0aab78f4bf88f284638c4381df5f
SSDEEP

96:v6K6M8+VByfNrTBupzlTEVmLQNtNDkP4:vKM7qr1nmsNtNDkP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0af1b4c27470a990a1d898bc0e2ea530

Files

0af1b4c27470a990a1d898bc0e2ea530
.exe windows:4 windows x86 arch:x86

ea40c2d11485a28df626c64f57880a56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FreeLibrary
GlobalFree
LoadLibraryExA
GlobalAlloc
CreateRemoteThread
WriteProcessMemory
VirtualProtectEx
VirtualQueryEx
VirtualAllocEx
VirtualFreeEx
OpenProcess
CreateProcessA
GetProcAddress
CreateFileA
lstrcatA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
ExitProcess
LocalFree
LocalAlloc
LoadLibraryA
Sleep
DeleteFileA
GetModuleFileNameA
MapViewOfFile
CloseHandle
WriteFile
UnmapViewOfFile

advapi32

SetEntriesInAclA
SetSecurityInfo
GetSecurityInfo

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE