ad117af8849070deb5018e9ecd9beb3c | Triage

Sharing

General

Target

ad117af8849070deb5018e9ecd9beb3c
Size

76KB
MD5

ad117af8849070deb5018e9ecd9beb3c
SHA1

b06c5fc6d9414085c173560edede2419eba348e6
SHA256

947000bb048445dc8c1c149d4aace0ab1cdd55a34ccb3174e3b25a57b7a70c1f
SHA512

a47d003a597ec58529ebe51d01d6a5cad7afc9ddb32a612e7bbfc79a54b44c4d55f1d2d26e3c4302a42a25112dc37fb4a33eb35538ce6280704358400d98e3bb
SSDEEP

1536:9iXAUjF3PZo3YoRSPKT5kbvKSMOsD17WhIKpjVrs2ryrd1vUQuq6:9ip9Z5oRrT5BOskaKHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad117af8849070deb5018e9ecd9beb3c

Files

ad117af8849070deb5018e9ecd9beb3c
.exe windows:4 windows x86 arch:x86

838b307699903da4f039b5183e7138af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitA
LoadModule
ResumeThread
FindFirstFileExW
CreateActCtxA
DnsHostnameToComputerNameW
DeleteVolumeMountPointA
SetFileShortNameA
RtlFillMemory
EndUpdateResourceW
SetConsoleCursorInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE