ab22454c021b930305ab0be2bfd2d3e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab22454c021b930305ab0be2bfd2d3e6
Size

76KB
MD5

ab22454c021b930305ab0be2bfd2d3e6
SHA1

1488b27dbec3976a06c153ca7bf229d2e8d8ffc4
SHA256

603be30829769b77c52f9d954010d1992a345cf62128ce0fdf65666fab67acc7
SHA512

bec07931f000df4ff6175fb5fe8caec221ada117bdb5b02470a92f58378a1b79224749957ac46e4c459fb17218223150c4dfe1db0ecf1841bb5abff5e3f92502
SSDEEP

1536:Ldg3prYY/3+UwcYYVNwb9WlaGf/A1pjVrs2ryrd1vUQuq6:Jg3prhGcx4E01Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab22454c021b930305ab0be2bfd2d3e6

Files

ab22454c021b930305ab0be2bfd2d3e6
.exe windows:4 windows x86 arch:x86

976b01ddd881394047b74c69c0451076

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateActCtxA
GetCurrentProcess
SetCommConfig
RtlUnwind
GetConsoleNlsMode
AddRefActCtx
UnregisterWaitEx
GetTempPathA
SetConsoleCommandHistoryMode
Toolhelp32ReadProcessMemory
GetFileAttributesExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE