af1da29a17f7ef4a85677483df42f77c76b791c4d6791073fab9a188ff5123bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af1da29a17f7ef4a85677483df42f77c76b791c4d6791073fab9a188ff5123bf
Size

2.9MB
MD5

6bf4747740af7a0a636ab98161b676d4
SHA1

18b6129a5e2d55b6e87070c095a282ded59fc7ad
SHA256

af1da29a17f7ef4a85677483df42f77c76b791c4d6791073fab9a188ff5123bf
SHA512

68819167dd42fb75a0ad2b86ba9240528d49c11becf6514e0edb537f76547246c1791c2f2b9fa8dc5729d8cdff06c9d11e831032b82e463c35028e354947ff50
SSDEEP

49152:zv+PIz+PIz+PIz+PIz+PIQ+PIz+PIz+PIz+PIz+PIz+PIpBO3xCTmVozMBt4zrW/:zYpmV4MBtUZtIrJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af1da29a17f7ef4a85677483df42f77c76b791c4d6791073fab9a188ff5123bf

Files

af1da29a17f7ef4a85677483df42f77c76b791c4d6791073fab9a188ff5123bf
.exe windows:5 windows x86 arch:x86

9d9eefb75e22b258207c7db87cf77f45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA

kernel32

SetErrorMode
GetCommandLineA
VirtualAlloc
GetModuleFileNameA
MultiByteToWideChar
CreateFileA
SetHandleCount
HeapSize
GetTickCount
InterlockedDecrement
FindClose
LoadResource
GetCurrentProcessId
GetFileAttributesA
QueryPerformanceCounter
GetStartupInfoA
HeapAlloc
GetProcessHeap
lstrcmpA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ