204a7f82747746ef228fd928fe05ee86f4bb868a1ef423a392e272a269385fdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

204a7f82747746ef228fd928fe05ee86f4bb868a1ef423a392e272a269385fdd
Size

5KB
MD5

0c97cfd2f92c97c0adb800cfd00e9406
SHA1

45fa5fe7fb560b6b850f1c02fcc0643cc9020233
SHA256

204a7f82747746ef228fd928fe05ee86f4bb868a1ef423a392e272a269385fdd
SHA512

68c5a2b098734a9d17b596872278f85e01ff1060ed368b830a5b7c51a70e8c17af9efcefcc2241059c1afe6e77ae3a6a3653d1a94f17281b2b018fdb3d31c943
SSDEEP

48:SAlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7txRuqSxp:pWLkFfNnOKYloIQ2pm2pbYSnxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
204a7f82747746ef228fd928fe05ee86f4bb868a1ef423a392e272a269385fdd

Files

204a7f82747746ef228fd928fe05ee86f4bb868a1ef423a392e272a269385fdd
.exe windows:5 windows x86 arch:x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ