b9daf0428663ed5c32fe52ad2e5a5c70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9daf0428663ed5c32fe52ad2e5a5c70
Size

55KB
MD5

b9daf0428663ed5c32fe52ad2e5a5c70
SHA1

2970ec2a7458899648d43f3237de0a8a715181d1
SHA256

3ea14bd0643b913d09576a6e09ee21558df106315692fed918aef3a9be33014a
SHA512

b12b7b0a13561635094e1db1c9aecb8aa6a02a9b2def7babcdf3b4382e959bcbb6dfc0be8d5ac0da7a28b1ae4de7ce281f13a6f6c1c392e05faf2f05cde4f9d6
SSDEEP

1536:Grly/ug66cllc76afTne22BseENHIxSBJb:Kl+66Uq6R22BseEtIi1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9daf0428663ed5c32fe52ad2e5a5c70

Files

b9daf0428663ed5c32fe52ad2e5a5c70
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE