adfc1724217570ed454b746554431f19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adfc1724217570ed454b746554431f19
Size

2.8MB
MD5

adfc1724217570ed454b746554431f19
SHA1

58a5a5f45a45e1aeb6227ed9d9d9d5667d77e531
SHA256

7754d751ceaddcd5a997de04eeaafa1e740e2ff3b22f3e2eaa656c85a1f0654b
SHA512

ddd75431b968aaa4b3cfc87b6e9a7a75712c76aa259ae79d8f32f3d61c14154c5672d3137f2f7b580b0f746c191f5064adc25ce661622c5e80913bec82774775
SSDEEP

49152:9GtJSz98dLxKPfB4lISwA55p4iR3Q+NNbwq1KBh6grGSGwmlSSmZilvjevrJiz:9G3w2xI4lI/4b4U3Q+Dkq1qgMGSGwtSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adfc1724217570ed454b746554431f19

Files

adfc1724217570ed454b746554431f19
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ