159f9b290548903ba9b46f5604bb4af6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159f9b290548903ba9b46f5604bb4af6
Size

880KB
MD5

159f9b290548903ba9b46f5604bb4af6
SHA1

4ac320a3633d5e1daa1257d7bc08e0a3f4f8f37e
SHA256

c98c694e18791370d179fe0f7bd1aeb1b1b2ca02f8df369a64b7988bf769a132
SHA512

ee8ed3bdff921673cb655f599cba2f1dc53c3e60253167eb66db8363039211b998c30277f73066711cd575f5c46ec8ae29373bb01ffdd65879c36ecbe5d24b2c
SSDEEP

12288:4ONYboioyKbS+3Oq2ruwwOmQqleN54ZJL805i7JhxwDreV42yLdiRlc:4ONXiowO2ywwOmT+54Zp805i9MHcRlc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159f9b290548903ba9b46f5604bb4af6

Files

159f9b290548903ba9b46f5604bb4af6
.exe windows:4 windows x86 arch:x86

3201205a56a30111410d37d9c12832b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetLastError
GetConsoleTitleA
SetLastError

user32

MessageBoxA

msvcrt

_controlfp
strcat
strcmp
strcpy
strlen
strstr
remove
printf
calloc
malloc
sscanf
_errno
strncpy
free
exit
getenv
memset
_getpid
sprintf
fflush
_iob
vsprintf
memcmp
atol
_mkdir
_rmdir
_close
_read
_lseek
_open
_write
_stat
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ