a256d0ddba9a0a37137c811153b46cc7 | Triage

Sharing

General

Target

a256d0ddba9a0a37137c811153b46cc7
Size

18KB
MD5

a256d0ddba9a0a37137c811153b46cc7
SHA1

0ce48b36018b54a1ff4a507d59244c1f16311b7c
SHA256

08770f64f4216abbf243dbc7aedd4e1bf430092a3fcb8562dee790f63b213825
SHA512

94b91110e67d1d203d165da2c13052bcc05e4c5d005181c903fe80dc93f9d1f941529b2b4545943914778eafb600256beb6564a8db513def381c24c06e1cfcc8
SSDEEP

384:YkxLvI7/fnM2ocPSGlbFuVM2o5ynpxep/:YkWT/75QMsm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a256d0ddba9a0a37137c811153b46cc7

Files

a256d0ddba9a0a37137c811153b46cc7
.exe windows:4 windows x86 arch:x86

1f4abbb33dd3e97a3ddfbccc5f2141d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GlobalAlloc
CreateFileA
ReadFile
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ