1232748200a7e14acb18d378a2f4b5b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1232748200a7e14acb18d378a2f4b5b4
Size

9KB
MD5

1232748200a7e14acb18d378a2f4b5b4
SHA1

06656901207b88ff659726c44e7dcebbd6c4c516
SHA256

f9693210c24622f20db3bdb8d197a8ee9e3239c56f4445bc1d9200fb38e0ca23
SHA512

20ea559fbee4d4e87ab723f73fe1b750fc9d991faae7c04e768d3b35449ff0cc210ad4770db3dc8303ba3f9e3d74807a9df2f18cf6b30483379d89e0195d24c5
SSDEEP

96:617FsXBBBBBBBBBBBBBBBBBBBBBBBBBBB+WBBBBBBBBBBBBBBBBBBBBBBBBBBBBj:UsdJGa4O6Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1232748200a7e14acb18d378a2f4b5b4

Files

1232748200a7e14acb18d378a2f4b5b4
.exe windows:4 windows x86 arch:x86

99a6b225df26646b053b602e834ecf86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateEventA
GetCurrentProcessId
lstrcatA
CompareStringA
CreateToolhelp32Snapshot
Process32First
Process32Next
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
CreateProcessA

user32

GetTopWindow
wsprintfA
GetDesktopWindow

shell32

SHGetFolderPathA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE