edea2f792e8f228e4da73d6caa2a058c529cc3016c02513751672cd42db78a2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edea2f792e8f228e4da73d6caa2a058c529cc3016c02513751672cd42db78a2e
Size

23KB
MD5

7d7019ba386d9d0828a82d596da0f21b
SHA1

f2f09e93518f73c62e1a78d39194de63fa15b55f
SHA256

edea2f792e8f228e4da73d6caa2a058c529cc3016c02513751672cd42db78a2e
SHA512

e840128fda26be65e121e7a76e0a4a71b4d05d7ec69a30dbf36fa3966bc29212c0b69f57391af54b88073b394563d5a5397ff1f32e90f54d164a65895d994ecd
SSDEEP

384:jIz4cOeIQLcDupwRBMgxgOxfzq/1pL7g4X5hPbLWKMC9bTDClcRQ6TtJMqkfRWOk:jIUcBIQIDuWY2gOxbqz7g4LLZ9rZTDkC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edea2f792e8f228e4da73d6caa2a058c529cc3016c02513751672cd42db78a2e

Files

edea2f792e8f228e4da73d6caa2a058c529cc3016c02513751672cd42db78a2e
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE