1af8494c472f54a1da534a5911e560e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1af8494c472f54a1da534a5911e560e2
Size

28KB
MD5

1af8494c472f54a1da534a5911e560e2
SHA1

e9dcd92c4c1e3490d5927f2da9a0cc513da3b176
SHA256

9d2a620b6a9b72690e0736f4bc55cfc79ccbc0a39abd5860a3f8bad34639af7e
SHA512

077bc0b8a3d6dd02355cf85bca5721e9567d5524bacb5c68ece4d7a6c6eb410567d5c79cdeba9bb7367dc1421b82e168b07256711e085ce11e6391f28fff8989
SSDEEP

384:0c69Kgoy3L5Ht/mT8QoW7ZUG7b9jzENvVMH9p5jo27F5+d+duC8Cdwkp7PVTr:X69Kw3Lazo+ZtxENvqHxE6/+BC3wk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1af8494c472f54a1da534a5911e560e2

Files

1af8494c472f54a1da534a5911e560e2
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ