d144d1f2ba4d93e17f4548b41135f9a7a7d80686869a9fd832a49cafe7552df8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d144d1f2ba4d93e17f4548b41135f9a7a7d80686869a9fd832a49cafe7552df8
Size

856KB
MD5

00f0648e14aced0fed555e1c42672bd3
SHA1

0d96901205dbba2acc06b297a184a6e4c746e2dd
SHA256

d144d1f2ba4d93e17f4548b41135f9a7a7d80686869a9fd832a49cafe7552df8
SHA512

0cab8e39a9dfb1dc829f8b10c03092fb6953f9f275cfb609a44d5b5381e998b950f83f26038d6e4cafb13024115c5b76cd1737241e891c418bfe9728d94f50ca
SSDEEP

24576:9yCGE3LRCdMeHhxSacpSqr70ftGi7t4T46caCrHPIXhEcI2:kGRmUpfqj2066HPIXhEcI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d144d1f2ba4d93e17f4548b41135f9a7a7d80686869a9fd832a49cafe7552df8

Files

d144d1f2ba4d93e17f4548b41135f9a7a7d80686869a9fd832a49cafe7552df8
.exe windows:4 windows x86 arch:x86

e4d6e7e12df87c80f95b1c3329beb4f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateFileA
ReadFile
GetTempPathA
WriteFile
CloseHandle
LocalHandle
GetTempFileNameA
LocalFree
LocalAlloc
GetModuleFileNameA

shell32

ShellExecuteA

cabinet

FDIDestroy
FDICreate
FDICopy

Sections

.text
Size: 704KB - Virtual size: 703KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ