10913413f026b45443b28a8de749d796 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10913413f026b45443b28a8de749d796
Size

6KB
MD5

10913413f026b45443b28a8de749d796
SHA1

8e10ebe21de6e630185390ca6b6c7ba40a3be601
SHA256

ca6777f982cae1ae7f5a97d68586beaa94d8e9b26d0af93c9a35ebc183e81f1e
SHA512

ee4c0652b10af10d90a6b2ce6f1d405879bfe28bc26de32f1d321b44edf3bfd97fc1b607bc54d2adaaaa7828ead19394bfd0a8372eead961eb015e77ee78e525
SSDEEP

48:yWnPEQ0sVA9M0tyBNJrrFJKvtDZW0mpBKvtSYDJBS:RnPnWFtydFJK1DCk1h8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10913413f026b45443b28a8de749d796

Files

10913413f026b45443b28a8de749d796
.exe windows:4 windows x86 arch:x86

8310f2bedfbadb2be6a64535b152b1b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

user32

CharLowerBuffA

Sections

.text
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE