a4521b3ace62dd09ca2e052eca29528f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4521b3ace62dd09ca2e052eca29528f
Size

310KB
MD5

a4521b3ace62dd09ca2e052eca29528f
SHA1

423ce6461e0094a1709a317a7dad9459b89ae001
SHA256

53e96521cd3b51f46d84af75af6c462cf734d76bf8a24327fd8eeabe96bf4ce6
SHA512

a9469c4ef7ccd6802280b61b7e35c828be6f43333568c0ac7338453e7db68b6930b06aabb21543aff5e35f5e2cc8efe4b046162a3cf878160f0a9bb48e144548
SSDEEP

6144:v8RVGN568X2AlCaArtqF6p7JfIfyFZcyRRrNBY6uwDY1:v8RUN5MtaArtqFa7afy3c+pBzv01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4521b3ace62dd09ca2e052eca29528f

Files

a4521b3ace62dd09ca2e052eca29528f
.exe windows:4 windows x86 arch:x86

d740c6b869dac154ef6e51097ce3173a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex

user32

RegisterClassA
LoadAcceleratorsA

netapi32

NetDfsRemoveFtRootForced

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE