ad4799021890f30dca9d9e5fe1a22f2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad4799021890f30dca9d9e5fe1a22f2c
Size

392KB
MD5

ad4799021890f30dca9d9e5fe1a22f2c
SHA1

87084c328fc08019b470d6d85f142153ca47f6c3
SHA256

39ddb33f0465488c4e496c09a9b8700dce246bee80c491618f8c2b47df7e35bf
SHA512

cbffe14b898c242ab55cb05e0e7fd45852daeb39b75f9856e3362a018af8b70357dff9ae88fe5d48a83ca0580d06c5501e880aa26567411c9c5b88d2ada74064
SSDEEP

6144:SHJ6MWoVzpT1Z7emqfjFmMlBRUCmSplt6u9xg81PGktaPe8MohpgpcWe2HeApBBw:SsrorbeVlBGFS7r9xg8Hgj6pcWeid9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4799021890f30dca9d9e5fe1a22f2c

Files

ad4799021890f30dca9d9e5fe1a22f2c
.exe windows:4 windows x86 arch:x86

2e0edc215c569349c418e61c9aa432b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
Sleep
CloseHandle
DeleteFileA
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
GetFileSize
GetLastError
CreateFileA
GetModuleFileNameA
SetLastError
GetCommandLineA
WritePrivateProfileStringA
LocalFree
FormatMessageA
GetTempFileNameA
WriteFile
GetExitCodeProcess
OpenProcess
CreateProcessA
HeapAlloc
GetProcessHeap
HeapFree
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime

user32

SetCursor
LoadCursorA
DispatchMessageA
PeekMessageA
wsprintfA
MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ