ab7c2c6188bf42a953c5bdbbc31539c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab7c2c6188bf42a953c5bdbbc31539c8
Size

72KB
MD5

ab7c2c6188bf42a953c5bdbbc31539c8
SHA1

cb37b168d941906d4db0e4af0574b65dcde71355
SHA256

58952b7a1397141a9428b44daed9872aabfc5ca19aedfab79c9312a81909b43d
SHA512

d3ef9ab8bf26bce336d9360abd920e5d6b6cd4a7a4742ef250950c8dfffd1e78fd8a74b61bfccfc2d6abcaada6725f8db260758af3ade3b3d9c801a514353dd4
SSDEEP

1536:A56Dn6wnZmeVBHu1GbpDdBZKRt9Z9zo13MmZ95zkrkRQFj2u:hFYeXHu1G3iRl9zLm3i6oP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab7c2c6188bf42a953c5bdbbc31539c8

Files

ab7c2c6188bf42a953c5bdbbc31539c8
.exe windows:4 windows x86 arch:x86

78a04bc276f0def66b47c14622d2bf2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
OpenMutexA
WriteFile
SetFilePointer
ReadFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
Sleep
CreateProcessA
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind

user32

PostQuitMessage
SendMessageA
CreateWindowExA
RegisterClassA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ