4a2e2005653dee03b864eee68d4ff407 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a2e2005653dee03b864eee68d4ff407
Size

22KB
MD5

4a2e2005653dee03b864eee68d4ff407
SHA1

331ff60d0d58e2abda2209d72eaeb09b720b8cac
SHA256

7f75209ff88a13f616fe41a905d81ee8f2914e16a5561c23f96c2ecdbfb9dfe0
SHA512

c6a5c629dc8676fc7817f9bccdc0f5a8375faae0414f722731525935d1fbb31578f63c91a6182d7b6e9ab3fa052e27a4b034c8459d5c0c8330339b5188996c80
SSDEEP

384:n959LVr2UfxkPSubXsTusC4pj4MvLB7Z5EJ:n9rzfxkqubXIux4x4E5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a2e2005653dee03b864eee68d4ff407

Files

4a2e2005653dee03b864eee68d4ff407
.exe windows:1 windows x86 arch:x86

8b9b8b99943292de2ba0dcfe6edf701e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA

kernel32

CloseHandle
CreateEventA
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile

pcaewin

DTESpawnv_

Sections

AUTO
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ