afb70ae06855c90845e798f0551958b446c77664b5d532db3285a11122cf4b95 | Triage

Sharing

General

Target

afb70ae06855c90845e798f0551958b446c77664b5d532db3285a11122cf4b95
Size

72KB
MD5

5db1592e4604744348ac1f19e1472056
SHA1

0171856f86b741fbf0e0177017e89157f3a64769
SHA256

afb70ae06855c90845e798f0551958b446c77664b5d532db3285a11122cf4b95
SHA512

79dc267641595b453929fbbc25a57970e345f9f510f0cad365989ce4d97a11444f81dd6715e35bb3993b0905e7829342920833e36e5c035969a12bc850fc8df4
SSDEEP

1536:xU9NVM6oqQg9lOkOYmxCibH6n2VY7WMez7:e9NVDvlOrjxH6IYKMeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afb70ae06855c90845e798f0551958b446c77664b5d532db3285a11122cf4b95

Files

afb70ae06855c90845e798f0551958b446c77664b5d532db3285a11122cf4b95
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE