a170dd162ff4cbb17e81cc955fff6ab1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a170dd162ff4cbb17e81cc955fff6ab1
Size

12KB
MD5

a170dd162ff4cbb17e81cc955fff6ab1
SHA1

f477929680dd650c58728a5bbf3e8094145cd77b
SHA256

8ccf808f337163c2b5a9e26dae683845c47039903ee26f92d9ae75071dc8be1c
SHA512

1262bb08449626f538b34b0fdf3b0cd00ee6db4c25d2d35f2ea90b05674a99f1849552175b671116669ae2aabc3aa2b34623ccbd6a5196e02f94315a261bdcb6
SSDEEP

96:8absBiY7ze6ykJKwaVq19TzqUsx3Vde4OQ:XYPe6yHgTf224OQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a170dd162ff4cbb17e81cc955fff6ab1

Files

a170dd162ff4cbb17e81cc955fff6ab1
.exe windows:4 windows x86 arch:x86

3d1a74f28558ea9d8eb482e6798f3dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterHotKey
DrawMenuBar

kernel32

GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ