ac656842136ad28d217e603387e8b9e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac656842136ad28d217e603387e8b9e8
Size

208KB
MD5

ac656842136ad28d217e603387e8b9e8
SHA1

a8cb7e5bdced7e8a32efc07dcd34db0040f74134
SHA256

d817d10847b3aea290c252c6073e0027598dbcc10eaa4609d8e0d4e34cc869e3
SHA512

911920b85435a3202f9bcae0a29f5b0a121a18de1939dff4ff9c61c421b05de592d68cff821f8def462228887517e65cc7170b5b7a25184517a0ade25c8b5190
SSDEEP

6144:Ul0n6aul+Yayu6Rc7bzP4E2HhGaENKIzH2L2Ev:/n6aucYfuyc7bT4ESGaxIr4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac656842136ad28d217e603387e8b9e8

Files

ac656842136ad28d217e603387e8b9e8
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE