a402149b3f61a16a1556b332aacf160d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a402149b3f61a16a1556b332aacf160d
Size

112KB
MD5

a402149b3f61a16a1556b332aacf160d
SHA1

d60a04cf8ae93568b823fc55fa178adbd10b66bd
SHA256

a1d59ea4f27f7dce52ec0ca958f766a9e53a9cc613eab4ad3ba39d761ecdd554
SHA512

329a79ab989048aac509689fbaf4b01c1871c2adfe10a4d9a492c70bdc1906c2d1f8d60b66147dbd256824f48c2d19a6bd0182beab3e721d9500fa7d8627fb61
SSDEEP

1536:YI+4skdGs3mKzeFaoO6c1R+KKKtJgosYZVPlGcq4VBUL8Z:2xwNhfZZZgUZVPM4cL8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a402149b3f61a16a1556b332aacf160d

Files

a402149b3f61a16a1556b332aacf160d
.exe windows:4 windows x86 arch:x86

ed3c04535dd7e2786f31a141471ba4af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetACP
GetVersion
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ