dfa620ea45e45fd0df1e38f2fcb36fc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfa620ea45e45fd0df1e38f2fcb36fc7
Size

32KB
MD5

dfa620ea45e45fd0df1e38f2fcb36fc7
SHA1

d8d66bc7257734473a59ebda14352b9a371253de
SHA256

774d75f8843bc28584273b6076b3b95f7201c5b850f87896ac1ed5396904e1e7
SHA512

3e00a456b5a35fa39d9d6b3981c9803dcc92dc91612a84c856a70f27301d07131493511eb8c1008adbe6486dc72d90b7ebe7dadb2900a1f805c5f70561b4be73
SSDEEP

768:3yllxuzaS+p7uUQ0K0v8Bl1O4w6ZxN+kDaL7aGGjzgxg2V4AN5xLD40:3IJduT0KvBDmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa620ea45e45fd0df1e38f2fcb36fc7

Files

dfa620ea45e45fd0df1e38f2fcb36fc7
.exe windows:4 windows x86 arch:x86

d5e0355f8764c235b38759b860077ceb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

MessageBoxA

Sections

.alex
Size: 13KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.alex
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.alex
Size: 3KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE