248acf6067a228fb94601a08aadc15b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

248acf6067a228fb94601a08aadc15b5
Size

47KB
MD5

248acf6067a228fb94601a08aadc15b5
SHA1

6a867bfc62f3dd366ed44ac3d221b9eb5736f32f
SHA256

fe042edce94092ba15369baec082605189fe080c318755bad179b2cecbbaa2e2
SHA512

864050f5a4b399f02952c28bcbff72c6fec6b4a9154f80c80bc0865e6c2664882ed39294358a69981059244410d23b6f9dfe61305104baf86e431d407b95e402
SSDEEP

768:jHmtDQ3OcwD7zxlTrxsE9uOPxeYQ4cLpQzxqUAVLcbDxh4dxYJkfWw3NOdfzesuj:jd3PwbxjJuOZQ4Sp84UARchh293+I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
248acf6067a228fb94601a08aadc15b5

Files

248acf6067a228fb94601a08aadc15b5
.exe windows:4 windows x86 arch:x86

6f1a827dec3fbbed96b0855f2ccec630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceA
DeleteFiber
GetProcAddress
GetModuleHandleA
Heap32Next
SetConsoleCP
VirtualProtect
VerifyVersionInfoA
VirtualFree
VirtualAlloc
WaitForMultipleObjects

ws2_32

connect

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

Sections

.code
Size: - Virtual size: 144KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE