24b05c95dfea34b5cf3a8fd0a646fce9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24b05c95dfea34b5cf3a8fd0a646fce9
Size

3KB
MD5

24b05c95dfea34b5cf3a8fd0a646fce9
SHA1

0ea3e2598e2b71ec0e66a36e95c9d4d9d1fa5dd8
SHA256

7bfb39270b1f516aec65418d780c81ae8db63a4858f34e2b906c41a2ddc086d5
SHA512

32a36860d4d72274cd419386d84747be9ceb283684afdf2b7263a60f62188bea5f8164269e5849a6a73ec8445eb86ac33f2e71314fa6029252defa68e45c3189

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24b05c95dfea34b5cf3a8fd0a646fce9

Files

24b05c95dfea34b5cf3a8fd0a646fce9
.exe windows:4 windows x64 arch:x64

a19666f47b2aa7e3be11353ebc390855

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ