2a8117b3b246a4dd46daddeae130d7c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a8117b3b246a4dd46daddeae130d7c5
Size

96KB
MD5

2a8117b3b246a4dd46daddeae130d7c5
SHA1

ac2460ea3ed83b532a17960877d6120141e98fa4
SHA256

8dee9938e63c1ef1eefeedecc995d4c282aab3ecb8f67b9852dc009834d45d3f
SHA512

6b6a5333f744af3e055070476f7084ab332761d6a8e970ed1a2f1ec7e74ba6eff7c9c9fc981e96ee48391587f138ef0066b602f5a9423f6fb6ebc37242a23cc4
SSDEEP

3072:Sk5H+vF7LcccRXkCgeZ8zSpaG/SCEwHO7SDE:3mCZGzSpaG/SKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a8117b3b246a4dd46daddeae130d7c5

Files

2a8117b3b246a4dd46daddeae130d7c5
.exe windows:4 windows x86 arch:x86

ec0a86983e0a01f7dc52f262ae94fcb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

lstrcatA
GetModuleFileNameA
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
ReadFile
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ