abfeca20a33b69b357db6cf58201a776 | Triage

Sharing

General

Target

abfeca20a33b69b357db6cf58201a776
Size

58KB
MD5

abfeca20a33b69b357db6cf58201a776
SHA1

28556cd3c0476c08d901839f7bbc81f38b07c1bf
SHA256

b36c18cebd23230c441fb952078ea9f4e381dd56879bc2b87d37072937f8e218
SHA512

dd37c79419d4a63c01edb0596eef475619e57b23ca231801d12e5c973edab5a244d0d3d96bc001bd3c55c4b633180185c048dd7ad20bb605c12932538c2e4a89
SSDEEP

1536:6iEBVuZEcN/YJyzpdXwhHCHcS62Roz4IjAMWHYz3QmlWwQGw:6iUkf/YJyutSfRop/W4zABwQG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abfeca20a33b69b357db6cf58201a776

Files

abfeca20a33b69b357db6cf58201a776
.exe windows:4 windows x86 arch:x86

ef48b67f74d803fe83585fa974853d74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
ExitProcess
VirtualAlloc

ntdll

NtCurrentTeb

opengl32

glScaled

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ