a0b482ffef494286ffec35c51dfa7f19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0b482ffef494286ffec35c51dfa7f19
Size

56KB
MD5

a0b482ffef494286ffec35c51dfa7f19
SHA1

60ef8b5c8b4ddd0e3837e40634f6f3f8737cea73
SHA256

7d64a7057de5448f9eb8fa8c9ebd5102a9234c18e50fd897d7c1ad03046573ce
SHA512

ed48f582bf9803841dd403b33d12adb32a55716bcd3c6cc6948aaf09b70a6cb95fee5c04bb6533eddadecb31207e0e4f03df7fc180c8422b2c2c303c3cd41094
SSDEEP

1536:NGBJUvGCvwNpk+u/2EPSl/fIOHsLfwmD3TvSLR7H2zOtsF:Nief0SzRDj6LVH2zO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0b482ffef494286ffec35c51dfa7f19

Files

a0b482ffef494286ffec35c51dfa7f19
.exe windows:4 windows x86 arch:x86

a4f8fc2ee63da076fd4574a2b4aa9a7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
OpenJobObjectA
BaseInitAppcompatCache
GetDefaultCommConfigW
NumaVirtualQueryNode
GetConsoleCommandHistoryLengthW
LZClose
GetTimeZoneInformation
InterlockedFlushSList
RaiseException

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE