10abd0de7cf5d464114a6dcf3e1475c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10abd0de7cf5d464114a6dcf3e1475c7
Size

31KB
MD5

10abd0de7cf5d464114a6dcf3e1475c7
SHA1

19164aa57e10dd1237c3a5edd03529bfab247cb5
SHA256

3f5c6cd0633b9af5378d06fdf65e0ae95fa819525a1e93292230a8b08e40a451
SHA512

6b39fdfa736600e015dbe93696d0920d4171cfcdabc20b41a9f893c5f98a180915a1faa9797da34e50714b1e254207a2e46ea93cb7989a34bf89f16695079084
SSDEEP

768:vMb2s6CPrOIxVk5z01NE8CF2qbck17CFUlG:vMuNf0jCF2jk17c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10abd0de7cf5d464114a6dcf3e1475c7

Files

10abd0de7cf5d464114a6dcf3e1475c7
.exe windows:4 windows x86 arch:x86

fbd5f1504048019390303b373d4653b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpungeConsoleCommandHistoryW
GetLogicalDriveStringsA

user32

RegisterDeviceNotificationA
RegisterClassA
DefFrameProcA
WinHelpA

gdi32

StartDocA
GetLogColorSpaceW

Sections

.icode
Size: 25KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ