ad5f8c83ed8d8dc0653a8a67ac9fc68a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5f8c83ed8d8dc0653a8a67ac9fc68a
Size

128KB
MD5

ad5f8c83ed8d8dc0653a8a67ac9fc68a
SHA1

82104e33bf3d1f37e99d067afe0ef8f0036427ed
SHA256

9b9856d4ca8313cf76d487f79f8fd62791a74ca65af7d32929c5d00a1d9fd206
SHA512

463ef98a6247ef1a3ca6ba802fd97ff70f1adfecd145b777d2afaf64435b70cf5fb4b1ee837a48f8ec4a06ac111cff45a3cf93babad3adbdec29f3a9a45b28c3
SSDEEP

1536:ytri2SOitri2QOitri2ROitri2QOitri27Oitri2QOitri2ROitri2QO:Urqr4rLr4rNr4rLr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5f8c83ed8d8dc0653a8a67ac9fc68a

Files

ad5f8c83ed8d8dc0653a8a67ac9fc68a
.exe windows:4 windows x86 arch:x86

802dcac7aab948c19738ba3df9f356d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strcmp
memmove
memcpy
strncpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetTickCount
TlsGetValue
CopyFileA
WriteFile
HeapFree
CreateFileA
SetFilePointer
GetFileSize
ReadFile
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsFree
GetLastError
SetLastError
WaitForMultipleObjects
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

Sections

.code
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ