04a5a3c3d29d456d34a7c310b1345f8909da0c9aa93fb94bdc8f892314a9755e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a5a3c3d29d456d34a7c310b1345f8909da0c9aa93fb94bdc8f892314a9755e
Size

67KB
MD5

6e39522fd95e89feca1800408e8db473
SHA1

6932dea1ffc917e8c8f6e550c6f268d4dd6f9b53
SHA256

04a5a3c3d29d456d34a7c310b1345f8909da0c9aa93fb94bdc8f892314a9755e
SHA512

862e0edada365a9507e6b1db5e5b74d850818ac3207467fcd9907692b497b78fa200fbee754f95c522e76fd0946ce464495e67b938f859a99fcc460d81e91d33
SSDEEP

768:ErzIN8njsjzbMmVF7eg2JDGWSbEJPKs6CQs0rLAKCzmkk+P8s5mphr4OKvog:Eq8jC7egeEb26Zs0rl+gtVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a5a3c3d29d456d34a7c310b1345f8909da0c9aa93fb94bdc8f892314a9755e

Files

04a5a3c3d29d456d34a7c310b1345f8909da0c9aa93fb94bdc8f892314a9755e
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE