438b8638919f5393a5012e79fa5f5ba0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

438b8638919f5393a5012e79fa5f5ba0
Size

14KB
MD5

438b8638919f5393a5012e79fa5f5ba0
SHA1

b49c595138deb7c2d89be71fcd3fbd70ca95f991
SHA256

94840fcc329f827ff1f3d36b4d4bf2b2a5f8e77db066c8f6adbcc3b23330e902
SHA512

a7c5cbd7526cd6d17190e7ea16624dfa42e6364434d5c47d92b4bb19f83e55e22b0e15747c24bef5c3341f17e4466a4f6dacbf9aac994e63b1bdd58c7ac1f4bf
SSDEEP

192:CxWFWRoLz4EBS3klVmW0d0bJ+AgdtP338ju57z962qO6ljLFYfz80Dn/qMU+p+:7FWRoL0g7HD+Akd3sYVcO+F4lCMU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
438b8638919f5393a5012e79fa5f5ba0

Files

438b8638919f5393a5012e79fa5f5ba0
.exe windows:4 windows x86 arch:x86

99bed5d2f1166d42bf5ab32e1daed598

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
GlobalAlloc
LoadLibraryA
ReadFile
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 618B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ