803b1301a5c9a636dcb8c6d85b584e0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

803b1301a5c9a636dcb8c6d85b584e0b
Size

87KB
MD5

803b1301a5c9a636dcb8c6d85b584e0b
SHA1

052ea572e6645cdb659a58529b7e7f36b69e08d2
SHA256

384b7a4a64cc76e1d4f75ae17dfad8f9a803f10842893047acc9a6fc94d19505
SHA512

aebd85b794400fb355f2040435761a40e70254ea140c65dc41368274406324602d0810222f5cf941032e5d66cd150cb6df6e184002df9ad57d4ac48cd8508af2
SSDEEP

1536:82atjtEBZO2SCKlpiHhpkaA1IE15k68DqF91vZIViwhc3SpRUUqdloWhVx4t:nfBZACK3K7RcZ1OD4BZCpRGroyVxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
803b1301a5c9a636dcb8c6d85b584e0b

Files

803b1301a5c9a636dcb8c6d85b584e0b
.exe windows:4 windows x86 arch:x86

a43bb400f8ab33d0f218c91fa01ec66b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ