adbdab009849a1addf55aefd5ee2cc92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adbdab009849a1addf55aefd5ee2cc92
Size

7KB
MD5

adbdab009849a1addf55aefd5ee2cc92
SHA1

19ba0cc2f29c6aa1627607fcb1ac6f4ed5bb3592
SHA256

e7e4266d852262e8e7b53d945cd1c89a097787825f6e0638476e0d6188293688
SHA512

0501237dd15c1bcbdbfb0cab740aebc0f0cb26966301cc82ed60b32259603f6c2ee705e369570741fc1de97d4b18cc0ad75fad7d6d62c16be2872bb19cc1fb97
SSDEEP

96:I4X1c6fXkkZSBBUSilnzmnVGDiWlokrwxY26uU0avPDe:IA1ckk3BTilzUPzkrwxYooDe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adbdab009849a1addf55aefd5ee2cc92

Files

adbdab009849a1addf55aefd5ee2cc92
.exe windows:4 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE