add92abb92a0f66a6ae8ba1332b4d543 | Triage

Sharing

General

Target

add92abb92a0f66a6ae8ba1332b4d543
Size

23KB
MD5

add92abb92a0f66a6ae8ba1332b4d543
SHA1

86de5a7619c6a199fd2e618181eee07e6cdb67e6
SHA256

b3868ee7617bc06ad853c40d223629c522ad3416e3d4e0358aae70207c19a09d
SHA512

f8c8a3bdd27bb39c340ac58adac10355e21d4c4753730c74a0963a2289b6f433e8654696ce095ca2618e2d50f4e53394b9bf26bea95dac01e899bd94cc36e1ed
SSDEEP

384:sqVFnJN7TY8wmcuYG56rX6fQaUUGlG7lS/KfFrEPveVSv/w4CgdnD:sknT/cuB5A6fQaUUTlS/Alcg4L9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
add92abb92a0f66a6ae8ba1332b4d543

Files

add92abb92a0f66a6ae8ba1332b4d543
.exe windows:4 windows x86 arch:x86

6c772d26c74752b56dfd0cafb7706a4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHAddToRecentDocs
StrRChrIA
StrStrIA

wsock32

WSACleanup
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SaveDC
TextOutW
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SetDIBColorTable

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ