b90db7a0eadb536b61745ecdc4aee2ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b90db7a0eadb536b61745ecdc4aee2ee
Size

3KB
MD5

b90db7a0eadb536b61745ecdc4aee2ee
SHA1

50d306c2a34faed8525ef36b4d8621462b486c0f
SHA256

e1c8f11c1a9f103ca0399f789e6ff93156f33f9d65cd1f15a569317bf983be90
SHA512

c70e9ec2b9d3b989d5a230d5823618d69a0d5b1794fe5f0fdd1279e0bf1393c4f488fa0712c307694ba3d9d75ec9a199fe085829d10fc9b67d1ab84e18fe666a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b90db7a0eadb536b61745ecdc4aee2ee

Files

b90db7a0eadb536b61745ecdc4aee2ee
.exe windows:4 windows x86 arch:x86

a9f3c18b14ffc537e21110ad2fd5e8f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fopen
fwrite
fclose
_controlfp

kernel32

GetStartupInfoA
Sleep
FindResourceA
LoadResource
LockResource
SizeofResource
WinExec
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
CloseHandle
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46.6MB - Virtual size: 46.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ