243b7271697f0dd22c7a5c4c9f8afbc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

243b7271697f0dd22c7a5c4c9f8afbc4
Size

64KB
MD5

243b7271697f0dd22c7a5c4c9f8afbc4
SHA1

df824ba9cf8a090a8dffbb573c9def2e2e908e7d
SHA256

4f7a3cab060dacdc299da451e9ef04722c022bb65b1e185b0a1b8a74bace2e2f
SHA512

f67c3086da144e2f92d86ec6492a87e399b529d506d78f968b51da96d06e71dc2f26cc9f5a1b94b2d56fb9f945bccf34477a47f88f142ab58cd7632b810add1e
SSDEEP

1536:6V9H0hAlW4KJ6P3PfyiOD9VMScd5maXBPg:M9H0hApEHDASwmaRPg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
243b7271697f0dd22c7a5c4c9f8afbc4

Files

243b7271697f0dd22c7a5c4c9f8afbc4
.exe windows:4 windows x86 arch:x86

03f863e46f09227bbbff9d9103a609f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileApisToOEM
GetSystemDefaultLCID
SetMailslotInfo
GetNumberOfConsoleFonts
LZDone
GetSystemWow64DirectoryA
CreateProcessInternalA
ExitThread
CreateProcessA
FindActCtxSectionStringW
Module32FirstW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE