2423d1aebecf0674b178e17d9cdd0d43 | Triage

Sharing

General

Target

2423d1aebecf0674b178e17d9cdd0d43
Size

18KB
MD5

2423d1aebecf0674b178e17d9cdd0d43
SHA1

7e6c70fd5578e4a831d4c92ea0e405cef5c1d7f7
SHA256

d99db56216798da56c150fa8bf33b049e1c40e6a1da68efb4dd4bd71dc12e6b5
SHA512

a1d6f0e68b9cf7caa0615589196bd8b7002eee0d9b42298ac19afc19b2af47921c986ad47b584bd4275a9c0a9bf368c569c9f5574dfee48a5d55eda4cb89e9c3
SSDEEP

192:I8H0vK+2U6YJdMdAjgBH2HuGR9DVqPWOwSou1T5F6rCkCDO:vUGGgBWHuQ9xqPWOwZQVkrCD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2423d1aebecf0674b178e17d9cdd0d43

Files

2423d1aebecf0674b178e17d9cdd0d43
.exe windows:4 windows x86 arch:x86

53ee2d57f7f31c15e1abc579f6fa2bf1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
LoadLibraryA
SetUnhandledExceptionFilter

msvcrt

_fstat
_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fread
free
malloc
memcmp
memset
printf
setbuf
signal
strlen

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE