ab00beff964f4d02a237b30742130d10 | Triage

Sharing

General

Target

ab00beff964f4d02a237b30742130d10
Size

30KB
MD5

ab00beff964f4d02a237b30742130d10
SHA1

d3fd396576aa0c2057728da676dc8c3aea416f8c
SHA256

ac389ce1dd53626cabf45fb66f85e51ff1db8a6bdb7efb43024f39da9aabaec7
SHA512

c2265d3ee7a086682c5d46deef3077bd02fcd051ee5638e9deda6a90d7852a86d9518d31a6e06ffb1025a20ebfa9dccf5bdc9585c93d01d10f5a5c1efd099907
SSDEEP

768:PlUvnbcfV6i+vj0AW3tLOXoyFARkkIRmNz+jtS16Z:tco4vvQAWdSX7yhQRS1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab00beff964f4d02a237b30742130d10

Files

ab00beff964f4d02a237b30742130d10
.exe windows:4 windows x86 arch:x86

bf9a133b2d9dcd1fc058f67fb366116a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
GetModuleHandleA
BuildCommDCBA

user32

GetProcessWindowStation
PostQuitMessage
SetTimer

gdi32

GetStockObject

advapi32

RegQueryValueExW
RegOpenKeyExA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ