ab5a04dbbb0cc0c92745340c4e04d189 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab5a04dbbb0cc0c92745340c4e04d189
Size

44KB
MD5

ab5a04dbbb0cc0c92745340c4e04d189
SHA1

53e01aed763df7fda1c01530273f28dba6df6a45
SHA256

fdfd25e736d232f61684c4b2b0e1335f21e85a88c145dc161a1fe21d7680fc32
SHA512

7c291b3b9a6b83116675481a2a6a3c965dc2cc312beffd3c45463c54a8340e54ed4bd28a613293a0f786918c10064c3186c97bf2c8475632a1998f089aa15428
SSDEEP

768:Q3bE/bnBERTSDYEFIk68tOnXkNHRNGZSW5QI8TJIj44:neBE5KkxggHGZSh5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab5a04dbbb0cc0c92745340c4e04d189

Files

ab5a04dbbb0cc0c92745340c4e04d189
.exe windows:1 windows x86 arch:x86

7c00c8c83ce27ea1de1f41137701e936

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePen

user32

VkKeyScanExA
WinHelpA
wsprintfA
wvsprintfA

kernel32

GetDateFormatA
GetDefaultCommConfigA
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

Sections

.code
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ