a2435bb60abfe12559fd03ed4e55cf41 | Triage

Sharing

General

Target

a2435bb60abfe12559fd03ed4e55cf41
Size

137KB
MD5

a2435bb60abfe12559fd03ed4e55cf41
SHA1

585f90a6bd1e2a659a22784f90d601853e02d3d2
SHA256

b5ea6c23309221be96268644a0f05429f35b9d462562065bb8cc65068f909084
SHA512

954bc465c0d30ba30d367dd252e34feb70a23169789a4fcf3dfb8af73e5a003f63ea52aee649a8555179896c97b4304b90361c1599e4dbb8a54a7a46b9983ea7
SSDEEP

3072:pCkrtwQqSoV1c1fsFLKlr7M1Uvk+t8zbHzJPKZ:pH/qL4sglr7Ma/tQzJyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2435bb60abfe12559fd03ed4e55cf41

Files

a2435bb60abfe12559fd03ed4e55cf41
.exe windows:5 windows x86 arch:x86

7d14bf9ec42028cef2cac4fc07df34ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
GetProcAddress
LoadLibraryA
UpdateResourceA

user32

GetAsyncKeyState
TrackPopupMenuEx
SetPropA

gdi32

GetCurrentPositionEx
GetMetaRgn

Exports

Exports

hwrfpwhcfnshwi
plinnhawlwrmyex
zhslfddbh

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ