a438c57184bd11aeaf50c44b4855d31b | Triage

Sharing

General

Target

a438c57184bd11aeaf50c44b4855d31b
Size

38KB
MD5

a438c57184bd11aeaf50c44b4855d31b
SHA1

e355cf2cf662cce637bfa1a3ced5cd0fdfd2581d
SHA256

c262da58aae6b069dd4204cae2bd192dda342cc3e398069c98dcbac7297b538d
SHA512

1666a27c32da0f7eab938672b6de325771c85dc1bf5eb4cffc33e1afa3fc6fb10ff2b5b4ccd449242a39fd8fdd3fbca39f8b0e10110ab2a79dda15f0ff6995c8
SSDEEP

768:p89ZWqHqXbqWA+gE46oEYWqkshCn0OO47lGU4XKRvm8:00bLA+dFoEYWv85O37b5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a438c57184bd11aeaf50c44b4855d31b

Files

a438c57184bd11aeaf50c44b4855d31b
.exe windows:5 windows x86 arch:x86

b7e5145558acc698fb8209a2966cbfb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
lstrcpyA
FindClose
ReadFile
GlobalAlloc
CreateFileA
SetFilePointer
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
GetLastError
TlsSetValue
ExitProcess
GlobalFree
IsBadReadPtr
RtlUnwind
GetCurrentProcess
DuplicateHandle
GetStdHandle
InitializeCriticalSection
DeleteCriticalSection
FindNextFileA
GetEnvironmentStrings
FreeEnvironmentStringsA
WriteFile
DeleteFileA

msvcrt

_mbsrchr
_mbschr

user32

wsprintfA
MessageBoxA

ole32

OleInitialize
CoCreateInstance

Sections

.code
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspr
Size: 24KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ