ab12ab5a7b28fe8e687fd11b131867f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab12ab5a7b28fe8e687fd11b131867f8
Size

160KB
MD5

ab12ab5a7b28fe8e687fd11b131867f8
SHA1

c7b563f9b424d65b837363cc85fbd4bcb6f59268
SHA256

71e1b9a859db7b41a475139c0af18073d2e9b2f099a0ad835fee27edc96ab6bd
SHA512

5b6e6bd9d0b4424de4d6b8923bdb102ed0be04d620e483efc40ef17e6ec8d2f5a8fd43882ae29058ea7bb5a3424a2637437352c33e17514fdf97e1520612a6e6
SSDEEP

3072:DmpOQ8joGgcriAwS+oeDhSHjKKQBXc+psTT42iNQInnnnnn:i8QWoGZriAuDAWdcXT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab12ab5a7b28fe8e687fd11b131867f8

Files

ab12ab5a7b28fe8e687fd11b131867f8
.exe windows:4 windows x86 arch:x86

8bfe94dd412d58451831d2d5362a1928

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetA

kernel32

GetTempFileNameA
WaitForSingleObject
CloseHandle
CreateProcessA
DeleteFileA
GetSystemDirectoryA
GetTempPathA

msvcrt

_strlwr
sprintf
fclose
fwrite
fopen
strrchr
_snprintf
strstr

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ