390014e68b4c1910b46cb752ccb5ca40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390014e68b4c1910b46cb752ccb5ca40
Size

297KB
MD5

390014e68b4c1910b46cb752ccb5ca40
SHA1

4a0abf2d10c04d270bf40ca886e2312cfc7f1a55
SHA256

435d9baaa54828c6518a145a8d8ed566eb5e43bc0d3dd923ed82fd38f1b8f27d
SHA512

fe823a2a32d1b842950d75e061b483093f0f7cc485aa69beb930eeaf33256be9150435c978e30cd20c623db987abcb72e9fe86a70e3f160db898c95e66df326a
SSDEEP

6144:5AK7tXfrK+rfWasGTEPYixaCMjfTGgVxursm4Dcl0:5AszKzrGg5rMjyg+r8S0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390014e68b4c1910b46cb752ccb5ca40

Files

390014e68b4c1910b46cb752ccb5ca40
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 254KB - Virtual size: 772KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ