805f1808715487ad04b5bb154296fb64 | Triage

Sharing

General

Target

805f1808715487ad04b5bb154296fb64
Size

15KB
MD5

805f1808715487ad04b5bb154296fb64
SHA1

31bc658afa7cd8d03a91e867c1f55a29e961a9b7
SHA256

55dedc4ecc1703c6dcbf07cfb7dcaef4d98bb19cecea4508eab7bf57e3efccc8
SHA512

a886f7086c9bdc43175028739087b35641708d9232174f3b4cd6048fc49333c8259025b0b3bb131cae2b832d14787752667e7c20f9474c6c7561e6741920792a
SSDEEP

384:Puz6o/Zv8CrEaaZn9NNZLkl50OKeO72/D/C2F:ytXIlZn9NN+meOQrC2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
805f1808715487ad04b5bb154296fb64

Files

805f1808715487ad04b5bb154296fb64
.exe windows:4 windows x86 arch:x86

50dd0ec76ff060bc3418dc0d3ce6fb6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

GetTempPathA
lstrcpynA
lstrcpyA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource
Sleep
WriteFile
lstrcatA
lstrcmpiA

Sections

.text
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ