496fbd27e62ba6286eba0fc817f5113a | Triage

Sharing

General

Target

496fbd27e62ba6286eba0fc817f5113a
Size

51KB
MD5

496fbd27e62ba6286eba0fc817f5113a
SHA1

87d6280cb990867b1fbcdaae72c35f1bfd8733b5
SHA256

762b745e8e7eca5444d4a961fce5e26f1a4e3b2da0bb8e9fb1b48b3752836eb6
SHA512

7927a4ee3e6b6a7f3582a92031ca6f5923e3eb48454b1ed3d8b6a959688093cab37a342e9e8371a1dacf9f9c05a0a6c7860c4073c73e6e9ddef569abc70d80a0
SSDEEP

1536:F3ZtLmRvRtd1cIngd6fYe5HVw80Kqen9e4:zMjtg28TgHCRPeQ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
496fbd27e62ba6286eba0fc817f5113a

Files

496fbd27e62ba6286eba0fc817f5113a
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE