e108b0a7a1a793e07ee31bc8b0aabea5 | Triage

Sharing

General

Target

e108b0a7a1a793e07ee31bc8b0aabea5
Size

67KB
MD5

e108b0a7a1a793e07ee31bc8b0aabea5
SHA1

2cacab488c05434807e3ff125026ca102982b8be
SHA256

69d2d5b744ed090a7007f585ef7d59842384b7fd48cc7c0a03e61814e15c7cfb
SHA512

6b3df2446415834367b9d1d4a2a66bbf948d68e507df30e6794809412149ad47d3ec1a42bca56cebe7eff0428f75b68b330eb5afd399eb5b02810ea62b07cf93
SSDEEP

1536:O/EgAkRboZRboEg210hevjeYLIRI+EGtNbRboo/DRbo4kc:OsAWZWF2DSYLIRVHNbWobWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e108b0a7a1a793e07ee31bc8b0aabea5

Files

e108b0a7a1a793e07ee31bc8b0aabea5
.exe windows:4 windows x86 arch:x86

95240ea206ed9419a0027f9e0a497193

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
SetLastError
DeleteFileA

user32

LoadMenuA
GetWindowTextLengthA
CopyIcon

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 277B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ