944e50896d9d6103ea5b2c91f7e2f12011eead40771b48a4db0c798df11b8edf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

944e50896d9d6103ea5b2c91f7e2f12011eead40771b48a4db0c798df11b8edf
Size

244KB
MD5

21b5d6d934f51cc8e86c5fb853118f6f
SHA1

1b8caf03388b68fbf3663e8ce4d30aeb444e257e
SHA256

944e50896d9d6103ea5b2c91f7e2f12011eead40771b48a4db0c798df11b8edf
SHA512

a3af512baa547b5dcc20936f22ac61fc2195190d1976fb43e69c3664a7e857ad9f42d5d15578ca5373a91f7ba35d7361278e52b8cac3870f629f019049d7b82c
SSDEEP

6144:p1sFR1Oid5xxPJjN5F7kLk5WJYAVcwo6kxg:p+T1XvxxPJjNYkQJ9cwoRg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
944e50896d9d6103ea5b2c91f7e2f12011eead40771b48a4db0c798df11b8edf

Files

944e50896d9d6103ea5b2c91f7e2f12011eead40771b48a4db0c798df11b8edf
.exe windows:5 windows x86 arch:x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ