a132b84f379cea605f1b5ae00be2a3e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a132b84f379cea605f1b5ae00be2a3e5
Size

274KB
MD5

a132b84f379cea605f1b5ae00be2a3e5
SHA1

eb5167d2ea3f512fc59e3e8e5f32e2756efe4b99
SHA256

e488e136299a0c421c623111176ffd91d952e39099db68d3a7e1c1d2ed13ebe4
SHA512

938c02d48d45596e6abb1a28677f239af0b6b8121ebc20acd3dde63175eea0f2cea0bb98f3750d9f901e1f1ca84e0472d74c15f737f4e2c90afa03db0dd14a04
SSDEEP

6144:15yA/3m/IibWKlwETBnJooi5MwpQFGjjpusjk5JDW3DaZruv30+S8NeP+mSQxp/:1xPm/DlTJooiywp9Zjk51eD6Kc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a132b84f379cea605f1b5ae00be2a3e5

Files

a132b84f379cea605f1b5ae00be2a3e5
.exe windows:4 windows x86 arch:x86

fc980d6650c14ed91d74a21e4858aec9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesW
GetCurrentThreadId
GlobalGetAtomNameW
GetCurrentProcessId
WideCharToMultiByte
FindNextFileA
IsDBCSLeadByte
QueryPerformanceCounter
GetModuleHandleA
EnumResourceTypesA
ReadFile
lstrlenA
WriteFile
GetSystemDirectoryW
GlobalHandle
FindFirstFileA
SetFilePointer
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

LresultFromObject
CreateStdAccessibleProxyW

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ