a3041705bfcd59ce7c728c99138742b9d770cfe21297571e431d52760b05736e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3041705bfcd59ce7c728c99138742b9d770cfe21297571e431d52760b05736e
Size

6KB
MD5

e44c214785beedc70b92d01cc463a306
SHA1

d019cc6255c146546e585f1c44da09339528e47d
SHA256

a3041705bfcd59ce7c728c99138742b9d770cfe21297571e431d52760b05736e
SHA512

2743c55ad61767cf8ac3627f0374f2b01f8d297b8fdfd7f45bc880669083c6ff01e4c19932add394cdb9e0811d2c90fbdf48874d3e3ea09e7a678c39373b796e
SSDEEP

48:SYbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uGO:l0mIGnFc/38+N4ZHJWSY9FI5WqPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3041705bfcd59ce7c728c99138742b9d770cfe21297571e431d52760b05736e

Files

a3041705bfcd59ce7c728c99138742b9d770cfe21297571e431d52760b05736e
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ