a278ad70a5d8f4066efcadfbe997eef5[.]exe | Triage

Sharing

General

Target

a278ad70a5d8f4066efcadfbe997eef5.exe
Size

404KB
MD5

a278ad70a5d8f4066efcadfbe997eef5
SHA1

a8c5b0964cd03ee44c6e43d6bb0fd806ec329890
SHA256

0994c279ee900db1f0dc68da4144a9aa64c25220da4577001813181cb3f59b25
SHA512

e47b48e79769deb195693dc4950edcbe3d1323c6ade25b6d60ef495fee59725a970e53ca039003dda69a775d443a4fa03ca09d89e6db60723c2610190c038c62
SSDEEP

12288:bJOP5daVTxtvM0Fb54gCwG7p13NJP5ouzv3:bJOXadxF3Fb9D4L9Jhz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a278ad70a5d8f4066efcadfbe997eef5.exe

Files

a278ad70a5d8f4066efcadfbe997eef5.exe
.exe windows:4 windows x86 arch:x86

6a64e39c9d950b9416b3efc0d1a29cc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
Sleep
GetModuleHandleA
InterlockedExchange
OpenEventA
CloseHandle
SetFilePointer
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
MultiByteToWideChar
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLastError
ReadFile
FlushFileBuffers
LCMapStringA
SetStdHandle

user32

LoadIconA
EnableWindow

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 336KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ