ad5a9f6cb50106218a0146b1c17285ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5a9f6cb50106218a0146b1c17285ed
Size

58KB
MD5

ad5a9f6cb50106218a0146b1c17285ed
SHA1

d3d1bfc82c010f9517495dc690a80913e5a6f9a2
SHA256

46fe9296ace1ec11242ce1aa029438ef20040fc7ab7d497dcf8e731cb2458929
SHA512

222febd3343d60204fb8e43290b6509b3e704137d2e2c8488893e5ab74466a386a2cb3197460728a241764af6af7bb83c70c39598ae005247cf38d86cedfb1f8
SSDEEP

1536:dbPkqQMlFBEmczgkQIMGbdPMF6D2bkJXES:eVMlFBEmczhQITZMF6z9r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5a9f6cb50106218a0146b1c17285ed

Files

ad5a9f6cb50106218a0146b1c17285ed
.exe windows:4 windows x86 arch:x86

399c9f076e8dab08a1e6586d6aa70ea4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateFileA
GetTempPathA
FreeResource
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE