a13a3da4d8bf8bc92940fa186e9e22c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a13a3da4d8bf8bc92940fa186e9e22c3
Size

183KB
MD5

a13a3da4d8bf8bc92940fa186e9e22c3
SHA1

90b4b4122299c67de79e74b2f1c9d0be768f52bb
SHA256

aa97629e3699b65e9c09954e955e55821975714701326b8a1bd8b39e1f84e1a7
SHA512

bbeca4046ef405ac8b81b29f2ac4a5207bfd6f455862418257301494db0a0c9f672bceb04de837940e77071b144ac9d89cbb1dd7299eb9c5ebcc60bac97c0a7b
SSDEEP

3072:GXhDjKuO6IYoJY9QaQudP1IlEjziGxbBhGP49kR6xiEN6OIfJ5cVwLB:AhBNoJwhdiGlqeK6V0OIfJ50

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a13a3da4d8bf8bc92940fa186e9e22c3

Files

a13a3da4d8bf8bc92940fa186e9e22c3
.exe windows:5 windows x86 arch:x86

e76489e5e8fb04e575fc22708aea5bc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 836B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ