abf0ecbb97de7d2ad67973927d2db2ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abf0ecbb97de7d2ad67973927d2db2ac
Size

83KB
MD5

abf0ecbb97de7d2ad67973927d2db2ac
SHA1

a00a7bb2fb2e853b9bf2e8ed7c92b24be3a6537e
SHA256

399e5eea43662f2a1c8bf7f055af826afd81936b6408761feaa788a8c756a0e1
SHA512

2a223c5b0c62fbb9214f2c1dad5d4a8a61844c9009351f6f85e91e0aca5d976792f83ca2b8e2adbe76d5fbfebcc7e3891339ba0aa6eca44cf3e701495d17ceff
SSDEEP

1536:EZiYruFB5BxU1kSsXMWrImj9ePcLXHWMAjEErxTWDTMqhGKYIZTET8bDQ:EZiYrSAKXMWrJjIcS5jBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf0ecbb97de7d2ad67973927d2db2ac

Files

abf0ecbb97de7d2ad67973927d2db2ac
.exe windows:4 windows x86 arch:x86

43b2cf82a5018824018cbc8a9b70bf8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringA
CreateJobObjectW
VirtualAllocEx
lstrcmpi
GetCurrencyFormatW
DebugSetProcessKillOnExit
FoldStringA
SetLocalTime
QueryDosDeviceA
IsValidLocale
SetConsoleLocalEUDC

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE