a31355ce20d587e94a5098a33a73913f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a31355ce20d587e94a5098a33a73913f
Size

129KB
MD5

a31355ce20d587e94a5098a33a73913f
SHA1

c1b373f30c373c03880ea9e8680b25b9d12d51ad
SHA256

3d69f69967e672cec4470129a62497738d2ba55b0e76c92dc95100792a491b4d
SHA512

24f860ea632a8ee635f2f6a6d32dc6044f491ae5e3d5340b303e4d88fbdf9d8e0d2db749b4f0ee41375c23b784b93c6ffe043a377018a2b5aaafd455a516abbd
SSDEEP

3072:3Kbc8o8XyrJ06F8vJfGf6673fC+1Q4VEZFEBnXiFLqJ9+v2:ab7Ry1xmvJ+7PnQ4acc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a31355ce20d587e94a5098a33a73913f

Files

a31355ce20d587e94a5098a33a73913f
.exe windows:4 windows x86 arch:x86

eed997d250d0687c8df79af5dec2fe56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

TerminateThread
ReadFile
GetLastError
SetFilePointer
GlobalDeleteAtom
FindFirstFileA
EnumResourceNamesA
SetEndOfFile
ExitProcess
GetLocalTime
WriteFile
FindClose
CloseHandle

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ