c61aa55213d17df089602fd8f481aadc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c61aa55213d17df089602fd8f481aadc
Size

53KB
MD5

c61aa55213d17df089602fd8f481aadc
SHA1

ae7d2d5e4548191230215ac51f098494af714035
SHA256

4ffdaacebf565027d79e095a7a7b78fad8e62454d755a7eb736139474180782c
SHA512

b405f1f52063aec8a0025ff17cb16ae1e84f77cea12dd45f9f154e71c8a1520981015b1d7efeb3146cc8a0f4d9f319c188fde1c379cdd6b09d5f392467f4b4bd
SSDEEP

1536:h8HCS7wiYHRsU+AAkesoakdE+DTdbPUu:hvrVOUZAGke+fdbMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c61aa55213d17df089602fd8f481aadc

Files

c61aa55213d17df089602fd8f481aadc
.exe windows:4 windows x86 arch:x86

ac87c749de041d050a4ac16a115a8cff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
GlobalAlloc
ReadFile
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ