acdb33db7af82c8c730a554b8f817930 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acdb33db7af82c8c730a554b8f817930
Size

231KB
MD5

acdb33db7af82c8c730a554b8f817930
SHA1

441b05788217c9feef3bd11cb3c8acdb5315056e
SHA256

50f62742d478f3cc420a2f12128613b219d71222336e1e9de1c13c3250ced706
SHA512

e3f5777ef7de5108f399753bac18c48fafb499639719b44efc130b56e3c653afb66cbf8e45478bf0f52de6801f8333836aa77f09deec62a0249d9b1e82594a25
SSDEEP

3072:IiY/czFOLcnQLKLL2ov6jrv7nwbZouMr4wzz89Oz8B1uCYvunDfvB75i58iXx1g:DFnn8oCoCg4M1KmJYvuDfvDqbh1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acdb33db7af82c8c730a554b8f817930

Files

acdb33db7af82c8c730a554b8f817930
.exe windows:4 windows x86 arch:x86

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen

user32

MessageBoxA
wvsprintfA

kernel32

GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE