509b2a524b926742a705c16105b1038e0f1f6f635608d5881b2841b91e2f0539 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

509b2a524b926742a705c16105b1038e0f1f6f635608d5881b2841b91e2f0539
Size

72KB
MD5

f70ce83a19e4c223b315a3b1a1675aa1
SHA1

2bace69a0833acba068ef605b0df34269b6b8a3b
SHA256

509b2a524b926742a705c16105b1038e0f1f6f635608d5881b2841b91e2f0539
SHA512

71aaa94592e13071ddd107822653f2a90143d16397a07eb1deb346c3377a84cdebe2bda9f390e5765d0eff6edd686ae6d0ab546796c5880b405a753f2a91cc3a
SSDEEP

1536:xgPd6aXUhvYMwRHoly48kXA9pD9fWZ/bwPsaqPc1KqvV2mjPxc:mi2Mt8kQ9p9fSbwPEPQ1/dc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
509b2a524b926742a705c16105b1038e0f1f6f635608d5881b2841b91e2f0539

Files

509b2a524b926742a705c16105b1038e0f1f6f635608d5881b2841b91e2f0539
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE