0b24dfe6cf1c969938fb5b24d2ac26fb | Triage

Sharing

General

Target

0b24dfe6cf1c969938fb5b24d2ac26fb
Size

34KB
MD5

0b24dfe6cf1c969938fb5b24d2ac26fb
SHA1

36324ba5cc32e1979b0ca1bb23456865409c1952
SHA256

07aa756aa8bba54ab2989ea63d28d090dba313a299bfe4a45e310dd90750ee50
SHA512

5af9228604b1f28ae841465c642d206fcb9ac5d73e2f0b606e45a782712fec032ffef1bf9c5e91838278bdefacd876e2e6233696b0eab4440fe3fb209a98c4a3
SSDEEP

768:LC8mNtw1CEVKqUg5jFZCp7offOGflh/wWxPdeVl:wACqJ5jvCp0T92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b24dfe6cf1c969938fb5b24d2ac26fb

Files

0b24dfe6cf1c969938fb5b24d2ac26fb
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ