215b48d49b04ccd8fc8951b9dfa8f59d | Triage

Sharing

General

Target

215b48d49b04ccd8fc8951b9dfa8f59d
Size

7KB
MD5

215b48d49b04ccd8fc8951b9dfa8f59d
SHA1

51208df94b3186cdb5887f20f158caa93f01ca09
SHA256

49b0c588abedc0239ef9580de207baa36d220ac82125bc65a6a3398692c66f24
SHA512

cb5025d9b9c13fcfe9da0ec4bb5318553518c7f539a6dc751fa3e313fbc6252a79bc69ac428ff36863f967156340aec6cbe5bed1aa794d454304176ebd0d3962
SSDEEP

96:AFB26INK4u5V0XzhjCb0q9Md57iZriH6sFwLcjOjVlNvCZM:Wr4520TsriH6sFwL5jfNmM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
215b48d49b04ccd8fc8951b9dfa8f59d

Files

215b48d49b04ccd8fc8951b9dfa8f59d
.exe windows:4 windows x86 arch:x86

83ff5ad2c3e911c3e892d80f99414d29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
WinExec
Sleep
ExitProcess
CloseHandle
WriteFile
CreateFileA

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE