b612a80f1882c02446a31f8edb6b273e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b612a80f1882c02446a31f8edb6b273e
Size

11KB
MD5

b612a80f1882c02446a31f8edb6b273e
SHA1

71e790a11dbb30fb4ebe18e0e9d076111995cbbd
SHA256

b0d7a82540fd95cd0e10a4227fe88c2e61dae7b9d74bd7cd079c31fc639751aa
SHA512

db6404b038d78afada951a90bc4b815fb35898f8f63dedd918e67a3f15a0e4b5216b0b0771009c84d675cc08acd478fae9c521f7ac50b4517da64dc35e705c88
SSDEEP

96:63KigiFPLD7ASTJ8TOhSUGJO/OTwmbEeOtJyg4DxNgi4coULs/To8r82nvaOtJy1:UPLgSlGOhSUGJ8OTV47KDUHKD3NJXvww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b612a80f1882c02446a31f8edb6b273e

Files

b612a80f1882c02446a31f8edb6b273e
.exe windows:4 windows x86 arch:x86

9847a60ffb780f50ae6c08e753fc48c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
GetCommandLineA
GetModuleHandleA
ExitProcess

user32

TranslateMessage
UpdateWindow
ShowWindow
CreateWindowExA
GetSystemMetrics
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
PostQuitMessage
DefWindowProcA
GetMessageA

Sections

.idata
Size: 504B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 580B - Virtual size: 580B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ