b43aac90ddeb211355ae743c0d6176cb8dfd533926c75ea221d851c9e1e81785 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b43aac90ddeb211355ae743c0d6176cb8dfd533926c75ea221d851c9e1e81785
Size

956KB
MD5

1a61e2e262b41167a9008e950a4fc9b3
SHA1

174a4c55bfbf0f1ce5b2e562c5a312379065feb4
SHA256

b43aac90ddeb211355ae743c0d6176cb8dfd533926c75ea221d851c9e1e81785
SHA512

5f862981cdbd59cd6e0175ef8fc9f23148611678a8b090833d0df865ed114ca91056e438cce4a05774e6f5aea588773676daf41dcba9c17077f4d2cbe006b633
SSDEEP

12288:xU1xc1Gyb2D58PY1Osjy6zzLaOpbt8fIlGyb2D58PY1Osjy6zzLaO:xMoGyb2D58PajyebufIlGyb2D58Pajy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b43aac90ddeb211355ae743c0d6176cb8dfd533926c75ea221d851c9e1e81785

Files

b43aac90ddeb211355ae743c0d6176cb8dfd533926c75ea221d851c9e1e81785
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 536KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ