b61046bc9540f44298d7830696474f45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b61046bc9540f44298d7830696474f45
Size

39KB
MD5

b61046bc9540f44298d7830696474f45
SHA1

33c91aea66dc000b82bbcd62c944fe7f427b2685
SHA256

406516a4a3f9821cab83c0fc267efda811282887b330ce5cbe4a37e0101061c9
SHA512

bf536a2e151a986181ed5a6354486390a7dd3560ecc43176b1fd0436fe7c40c17e1ec243cf6f45fb3501dcc26bc99adb9f23406f162d68567709671c98f088b8
SSDEEP

768:nuPPsP7Cpu1wmIsEYqfpVAV1prMW4/eW/iAE:nl9tbExfpVIyIWFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b61046bc9540f44298d7830696474f45

Files

b61046bc9540f44298d7830696474f45
.exe windows:4 windows x86 arch:x86

50eda9823ce97668b0a65bdf8b3a93e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ