13b40fb6b86b7ba07f7cc4115b8db010 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13b40fb6b86b7ba07f7cc4115b8db010
Size

12KB
MD5

13b40fb6b86b7ba07f7cc4115b8db010
SHA1

60223dfe3bdf48466d2bbabb7cc181c00f3608d2
SHA256

217db687cceb7093606dae00d06e16db53c1aa24de3b6aab984c939ba65213d0
SHA512

7e2a98267d7b2bf0568229557e59b31df14646d1d1bc75706de146b0056c10910a174d07d9c1432fae48182eb43e479590538f4abdc9ddc5a0bd53077d709a5e
SSDEEP

192:nbtxpn67jrnFTtuypnmnRV3cJT+z9OkW+hPjfXpR40/rnWFphOk3gmDOKZn:btxU7jRTLnmRVMBiOyBjfXp1afZgfKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b40fb6b86b7ba07f7cc4115b8db010

Files

13b40fb6b86b7ba07f7cc4115b8db010
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ