a86bef7f9381cdf7063b1efac1fa3e5e249b8a462b9f34425e6025a1821b432d | Triage

Sharing

General

Target

a86bef7f9381cdf7063b1efac1fa3e5e249b8a462b9f34425e6025a1821b432d
Size

73KB
MD5

ee384602e759a38259cc63ebe2d498a3
SHA1

a4ab6dc899d6da8513471c811876be1a21f61dc6
SHA256

a86bef7f9381cdf7063b1efac1fa3e5e249b8a462b9f34425e6025a1821b432d
SHA512

5da6eae8ef8be7f17a98b8d3b8f92109c33c981217e4f38d97c6de67ed1125395a893da50d11acb6ea92949fa1ffa5dac2711fbe7e8310c866c9ecc62ac2589b
SSDEEP

1536:14R9KzUD5X66zFOa2INL0U/zDDiGPsMI7MPeDm5Eg:2KzAXXzFt2INJ/4MPuqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a86bef7f9381cdf7063b1efac1fa3e5e249b8a462b9f34425e6025a1821b432d

Files

a86bef7f9381cdf7063b1efac1fa3e5e249b8a462b9f34425e6025a1821b432d
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE