148477aa845d2401adf6e591297752ab | Triage

Sharing

General

Target

148477aa845d2401adf6e591297752ab
Size

288KB
MD5

148477aa845d2401adf6e591297752ab
SHA1

151ac4400b5aefaeeafd47ba7ec17cf3b4264d3c
SHA256

a6676c846f8ef836fda809806b0b7b843ad25138094dcdefb1847adf54a16918
SHA512

063a00c5dcee120c2e3e53775faa69c893e039db1c43ec1307d006e9f7be6b984167b76baeeaa7e565c861823685815eccfa6cbf957df2246d78f4a464e11253
SSDEEP

6144:8195vFUIMq/rSlugdyVnsVLnk+VoB4/st77t5lt0s:8JtUIh/rSlV2y9Q77xKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
148477aa845d2401adf6e591297752ab

Files

148477aa845d2401adf6e591297752ab
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 251KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ