a98619464c22bca5d1f8dd6290d15d09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a98619464c22bca5d1f8dd6290d15d09
Size

68KB
MD5

a98619464c22bca5d1f8dd6290d15d09
SHA1

a8d505506958b08bb5f2bd30fb7c76ff9e9a6997
SHA256

dbc3b21055dd14d013812c38458b594ca6eea6bd05e165de6cc90ab5703634a9
SHA512

0e0d126b0d4b390b2fdc06610cf7272acd77610892f07e5280d3ff4b745fe14d7e3a49732c3d3cce787cc3312d1f3ba7dea6129df9b403032f46395c3485c184
SSDEEP

1536:xof7iRJUo+k2Hwp4sZYUwF/bHfjy+nygBYw3VYys:xeiZ+w+seDF/bHfe+nyIFY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a98619464c22bca5d1f8dd6290d15d09

Files

a98619464c22bca5d1f8dd6290d15d09
.exe windows:4 windows x86 arch:x86

8ec699a173707e52bb32e2ca3ee7e9e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlImageNtHeader
RtlImageDirectoryEntryToData
memset
_chkstk

kernel32

LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE