c15f2154b39e878f9803c0f7de23bd40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c15f2154b39e878f9803c0f7de23bd40
Size

19KB
MD5

c15f2154b39e878f9803c0f7de23bd40
SHA1

c321e6d33406df06a387e86882210a651409a647
SHA256

1e686bf4b568e0a7501ba173cb0c8988481ac4f8ac318f1d0e12dac9675f980d
SHA512

2be223d83a02ea5697eec2a016721183a0eff6250cdf23841e07b30c0407edda19ed66aa1bfb4c98bba2e239456d3bfcc0aa1e128f61f694a1f9f0066ff89930
SSDEEP

384:hSlgQcaIoqpDgg7SUse81A6PyU6eDbkUH/tldeY:1tg7Ua1A66ADbtf/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c15f2154b39e878f9803c0f7de23bd40

Files

c15f2154b39e878f9803c0f7de23bd40
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE