133e941339d709e1185a5e557e03de91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

133e941339d709e1185a5e557e03de91
Size

278KB
MD5

133e941339d709e1185a5e557e03de91
SHA1

1c694019f418e40b5e7eee9f3df95209a43803e6
SHA256

b9a11cdafe7a422f57216a64266a22a7ff7147c1ffdc4a4a810db16722ddc052
SHA512

af9da00bc79d5ced6b0991566f3cd2fe134a69f9a3d5eeac710fe6fb118f0c47376b49a94202656de26ee0690d837868a2cc34530e63128f6819938dca479281
SSDEEP

6144:Y0MY4ziJP2dgAhs3exIjK09qTfYk9yzvHJ1K+SrS7PI5sFnH9xzBat:Ytz2WjhG+IjVY9yzh1KnrSJ3Ut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133e941339d709e1185a5e557e03de91

Files

133e941339d709e1185a5e557e03de91
.exe windows:4 windows x86 arch:x86

372cb1afc2a93c932bf474b9fcb8cb7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 264KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.��
Size: 484B - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE