a4225e98200f07edbba2ad33980f6c48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4225e98200f07edbba2ad33980f6c48
Size

13KB
MD5

a4225e98200f07edbba2ad33980f6c48
SHA1

c0baca8fd0204d11254c5931afd52d43640e38f0
SHA256

944353363f7292a2848638a1617a600a7cf0b03af19ce78519c931261f291f7a
SHA512

9451e126d28af53b3e39374f87b38ea2ef32ce86c848ce375c21bc40fdff71f4fb490dc554d5d30ea59d8991b9ae5fb37da74c4f2d1d94617423b2332b6cb9ad
SSDEEP

384:Urj5j5mNbh/zuTW9A55EJWMSkTYmvEN50:UrNjGt0W9A55EJrLTY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4225e98200f07edbba2ad33980f6c48

Files

a4225e98200f07edbba2ad33980f6c48
.exe windows:4 windows x86 arch:x86

982e0d71dd2802d14b00b800de53cbf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE