118613247c131baeef9235d265e4489c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118613247c131baeef9235d265e4489c
Size

53KB
MD5

118613247c131baeef9235d265e4489c
SHA1

d23a521e728966497f7ca6289afa26727788f696
SHA256

e90fb898b2db7f997145b19460dbdd28a69a36504a3623f84763e6dd1f2a4db0
SHA512

8113c614fab27466269bb4427758d238fbc9daf7c5ddcf6b8148d3f75d243f44a789fb2d92d6eba9b699f67e00d4cc0db35164e1cf1673d404c6d9702811f191
SSDEEP

768:sXeO2Uni4Se4JxyOpcQXgVrKOJmQGtYf2ArMS6CaM0IKrPMArSLBLy4dJY:+2kL4nQm1ArMS6hM0BDSLBLyoJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
118613247c131baeef9235d265e4489c

Files

118613247c131baeef9235d265e4489c
.exe windows:4 windows x86 arch:x86

307861e9fe414e6c5e62e96266643783

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
GetModuleFileNameA
HeapReAlloc
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA

user32

wsprintfA

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 705B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ