a2640ba9cd266a51947ab54879337539 | Triage

Sharing

General

Target

a2640ba9cd266a51947ab54879337539
Size

8KB
MD5

a2640ba9cd266a51947ab54879337539
SHA1

89aabe11b81f9d7b1e0dbfa82b0e6e905107ae24
SHA256

c28a2739ff25cc2295bca79641afac4b63993d3f4560b2599dfaca6fb211b3e0
SHA512

e25867d1a00bcb5a055ef32dbd0cbbb5bee12204591256fddfee9cc2ea2c30d592cd964756caf3b29dd6b6f4178cf9a68749b512610320e545c82cde46e9dbd2
SSDEEP

96:V2KMHVW4n4lBrsQ1tS99CPtboynQsXsILpPTyI7rIkL:V2K449hP1oynQ2sILpl7rIkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2640ba9cd266a51947ab54879337539

Files

a2640ba9cd266a51947ab54879337539
.exe windows:4 windows x86 arch:x86

f444890d70d0e8dcbb8336d90be04e3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
rand
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strcat
malloc
strcpy
_adjust_fdiv
strlen

kernel32

GetModuleHandleA
Sleep
ExitProcess
lstrcmpA
GetStartupInfoA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ