ab1618ff746c965171a8e7fe244237ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab1618ff746c965171a8e7fe244237ba
Size

29KB
MD5

ab1618ff746c965171a8e7fe244237ba
SHA1

300869525ca306b6422b12263df88e92b146c1f8
SHA256

310c8ca83e3f1b18b4437dd3071a816c0487e5f3708910903b7df7fdd257fae7
SHA512

55046e8f7758b2562c339cece480580f4b8c6e115083d3047161fb94c819d5ae403b3f957d0ff819ea43c7d39b2a5aff96ade1bdb726f2f872aaba6142028317
SSDEEP

768:qeLMhlzjRKiQWgdgmWhtaHxNZbR3Xe9lZ3Fl6XbDn:jAzjRpngfsaHv3eJb6/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab1618ff746c965171a8e7fe244237ba

Files

ab1618ff746c965171a8e7fe244237ba
.exe windows:4 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 927B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ