a267983b8a7a4eaa3c66abb3cfec700d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a267983b8a7a4eaa3c66abb3cfec700d
Size

5KB
MD5

a267983b8a7a4eaa3c66abb3cfec700d
SHA1

32925529318f3682e2321219c4e44db359565e25
SHA256

3128ad2adc3f53a103481d85150b9aa4355ab480d1ae59fa89f4c783168e3f88
SHA512

8d7c1de372a5a9f72cb7f6a4d4454b28873b74864fb12493493e595bed9528bcb72b12a8ffdb4f3856ce0d0f619f0dbaf751290042c14ab91bcc51f636b8d95f
SSDEEP

48:6HPeQe+tG6EYTPVLdcwCFIZZn+aD3hEc21IWZVBWs:qDtGZYbVLf+aYjnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a267983b8a7a4eaa3c66abb3cfec700d

Files

a267983b8a7a4eaa3c66abb3cfec700d
.exe windows:4 windows x86 arch:x86

bbd84524ff001004aab58d4732d7bcd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetMenu

kernel32

ExitThread
WaitForSingleObject
SleepEx
CreateEventA
CreateThread
ExitProcess
GetLastError
QueueUserAPC

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE