51ea0819969c8aa1400d66ba262a2b0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51ea0819969c8aa1400d66ba262a2b0b
Size

4KB
MD5

51ea0819969c8aa1400d66ba262a2b0b
SHA1

28e7246e823e81bd07614e31be8fdcecc3faff1b
SHA256

8816c076a0571c1a154105e6c3c3253fb0ceadbd3485b2542f50d0f89d8eed25
SHA512

2b9a5017a8ce5fc690b7d3ba68aa6ffccd83084a6b66a3e520f3bf5614a024c86991e1a76c8315d6b9b8a55780ac1499f4cd9775f20f8b35e539e5387f84506b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51ea0819969c8aa1400d66ba262a2b0b

Files

51ea0819969c8aa1400d66ba262a2b0b
.exe windows:4 windows x86 arch:x86

4226133b778169445af1d5bbd2829753

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
LoadLibraryA
CreateProcessA
GetTempFileNameA
GetEnvironmentVariableA
CloseHandle
GetFileSize
CreateFileA
GetModuleFileNameA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetStartupInfoA

msvcrt

time
fclose
fread
fwrite
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fopen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE