abb30c381ca923e4114848e164200b05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abb30c381ca923e4114848e164200b05
Size

7KB
MD5

abb30c381ca923e4114848e164200b05
SHA1

d3cb3b4c11cefbdb6f9ae91ef56fea9373b38f27
SHA256

12f687a1c90a19f458d4c4a4d9e05d3819beee6250143665b724f4b25406c52d
SHA512

6be3c03d82a3b27990ac25dfcb41cb389e367e3a33aac8ebf772f35bbe5293823ce133a8651f2b1a40a8dce7a22d84630de83a21cf9439dbe3e0fc86598d5b09
SSDEEP

192:3GoF2PXPuOfa1SV0D8vkwfuXx0donP1oynb607ldF:lSXUU0ZquB0dw1d6Qld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb30c381ca923e4114848e164200b05

Files

abb30c381ca923e4114848e164200b05
.exe windows:4 windows x86 arch:x86

87d87a07a18d5855d835fe7dcd98a845

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
GetCurrentProcess
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
realloc
exit

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ