248b957d94e047a818b72cef3997dbd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

248b957d94e047a818b72cef3997dbd2
Size

24KB
MD5

248b957d94e047a818b72cef3997dbd2
SHA1

541d1a6be96f4f11c94cab4afefdccd5aff20a33
SHA256

97756e4f8e77fa771d3c18586ff6698f2e344ba6011c21aaef4366858eb50151
SHA512

3190551a8d17467d7e4c66d6588954a723675159aab7bbbfb21d4a87fb892743dfe2b1486bda204d31719370a7df1962150791f3c0c35cb0cd0a73a1aaf00562
SSDEEP

192:G9WJWPbCBebuNANpz2cEP1oyNOmxKQ9Z1:kWkPZfz2h11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
248b957d94e047a818b72cef3997dbd2

Files

248b957d94e047a818b72cef3997dbd2
.exe windows:4 windows x86 arch:x86

403c2fafaebe91f5dec4432dae4bc388

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateProcessA
Sleep
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

srand
time
__CxxFrameHandler
??3@YAXPAX@Z
rand
_except_handler3
_access
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
??2@YAPAXI@Z
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ