240ba949779b7b617e6bcaf651429cff | Triage

Sharing

General

Target

240ba949779b7b617e6bcaf651429cff
Size

3.6MB
MD5

240ba949779b7b617e6bcaf651429cff
SHA1

22d7392ff30ec719939c20a4b5ba6631e688f833
SHA256

1226eec36da54e9d3294ddcc06f489dd3ae3a038a64369b12e448e2f11ef5adf
SHA512

ebc3da2a9cebb808a580cd35271e53888a8d84e014b60199531ca81c3a0c0fbd4412fa14ae9763d3f103e01998b1681b31fafcefc6b6ffc9e505ff1954ef3009
SSDEEP

98304:3F1Bi3PDCxJY3qCoaj2tlFIwEm0kgafEFCIQbyfYd:V1MDWW6Cox9IrZkgafE8IdfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
240ba949779b7b617e6bcaf651429cff

Files

240ba949779b7b617e6bcaf651429cff
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.negosa0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.negosaf
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE