a1161a93490642e6554dc36e14108022259ae00bd2605ab04e1ebcec37b6246e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1161a93490642e6554dc36e14108022259ae00bd2605ab04e1ebcec37b6246e
Size

320KB
MD5

9a2ba3a61773962ee218ef9d7a45539a
SHA1

5ec182df4d4f83ebe586523b68c9c08342851557
SHA256

a1161a93490642e6554dc36e14108022259ae00bd2605ab04e1ebcec37b6246e
SHA512

3eb51f51a34ac54516c09c12cb6d5ee7a5e487e2cff29091db640e7e5d21fcd08099bee2f5681144aecbe53b5a7d9a12a564a55787a67402c00c4bd7ba1d2613
SSDEEP

6144:PU0USPuHKKAsgBZg178Z+Snk6Fpwlw8RmuZSz8VdPbMK95BL7jGjFUHpJ+MByg:2SPXSzJSk6FpwlzmupVdjx5B/mFYJ+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1161a93490642e6554dc36e14108022259ae00bd2605ab04e1ebcec37b6246e

Files

a1161a93490642e6554dc36e14108022259ae00bd2605ab04e1ebcec37b6246e
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 310KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE