a99a0da615be616b0ae52e85b69047336a426b35082b2cad42563d845c957e57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99a0da615be616b0ae52e85b69047336a426b35082b2cad42563d845c957e57
Size

23KB
MD5

1f42f2df4b427ae4fe4b81172dd41be9
SHA1

43a7fde283735835b4b4401bd56c35aff3f8e121
SHA256

a99a0da615be616b0ae52e85b69047336a426b35082b2cad42563d845c957e57
SHA512

51b089698bec881a5ea8668fd06e27705392bc026211c8063b1bb340db25e1bb5650e9519914fe28cac4adea2b257900536d5f96109946e5d23435aef8b9b15f
SSDEEP

384:ErzPtlC0Y2i/WqBfroAmbpXhA7qNHh9Ro7Eh6SjUbmc0FGc+RPV8A/L51ptYk0ye:ErzzC0YPBfro7AuNHlogs5bmjMd8g5RS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99a0da615be616b0ae52e85b69047336a426b35082b2cad42563d845c957e57

Files

a99a0da615be616b0ae52e85b69047336a426b35082b2cad42563d845c957e57
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE