284866b17009b7c1888161c119461c48 | Triage

Sharing

General

Target

284866b17009b7c1888161c119461c48
Size

207KB
MD5

284866b17009b7c1888161c119461c48
SHA1

e324fcaaf797c57cd0b01aef731e1ca571faf323
SHA256

193cce610312e0124518edca8ef5e0e8e1a47b75f7bba50128ceed474e277cc0
SHA512

60eaab9685312baf2a01bc025cbe679b0cc43460e7b1ad5becfc925b2255a49b37b0d1517e409142e29bdd5028730b021b7d426c1bddd5da755aa25cc3066bbe
SSDEEP

6144:GdoaPZDAWA9MeMSj6Y0eTG/O5qfw7+ggMSyp:cpAVHR6YJ2O5Iw76yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
284866b17009b7c1888161c119461c48

Files

284866b17009b7c1888161c119461c48
.exe windows:4 windows x86 arch:x86

99192e22414fae97de7f93bcf61aef1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

EVENT_SINK_GetIDsOfNames

Sections

.text
Size: 20KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE