afb2e69b3000d677e03abf24813531beedf1cfe649ccab7777f8623cadbb4474 | Triage

Sharing

General

Target

afb2e69b3000d677e03abf24813531beedf1cfe649ccab7777f8623cadbb4474
Size

96KB
MD5

e5b17ec86bd4e4a4a59a4b41c2534b5a
SHA1

cb6bc2e0aed2678a17e3ba4d0701f3991f177045
SHA256

afb2e69b3000d677e03abf24813531beedf1cfe649ccab7777f8623cadbb4474
SHA512

4471c82437141f31317f918f3c10a76a2dc3a1712e6668a0d47a1cf0cb46ff6f8ea06e2ba1e91ec149604e363c8ec92ed1cf39b5bfc77a60813115d6683c2896
SSDEEP

1536:hbKuBmwJwShVwWh3IV7hXKOeTo3QcxU1uZndmsmEzRu4fbEU89G23UbkcsgEDBPl:3cg2v3oTvGK8fjQNi4Hs2qPy2RWAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afb2e69b3000d677e03abf24813531beedf1cfe649ccab7777f8623cadbb4474

Files

afb2e69b3000d677e03abf24813531beedf1cfe649ccab7777f8623cadbb4474
.exe windows:4 windows x86 arch:x86

9daa8adb4cd3f35d39916f9b11d2786d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameW
WaitForSingleObjectEx
LockFile
GetDiskFreeSpaceExW
FreeLibraryAndExitThread
lstrcmpiA
RaiseException
LZStart
VirtualProtect
CreateNamedPipeA
GetNumberFormatA
GetVolumeNameForVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE