44ff8a2ec26627587100d1b8543766acafb4eeca893de85641db7b41d327fe8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44ff8a2ec26627587100d1b8543766acafb4eeca893de85641db7b41d327fe8f
Size

72KB
MD5

048cd09f7ae589dd87514f4e97dd48d2
SHA1

ced1bf246e886e538c7a87469378be68119cd69d
SHA256

44ff8a2ec26627587100d1b8543766acafb4eeca893de85641db7b41d327fe8f
SHA512

fe5c141c609d6f31edc61df40fa1d51f941cbc82d713076da54df14486f114532051d7dd912c257a107616e59aff7dd0fd039dae0166ac74861b78ed835e364f
SSDEEP

1536:xAyToPledgGkAlSt9yzkwUk6Nr5kEHIwAS:3hgRAlStYzkrJNFkEHj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ff8a2ec26627587100d1b8543766acafb4eeca893de85641db7b41d327fe8f

Files

44ff8a2ec26627587100d1b8543766acafb4eeca893de85641db7b41d327fe8f
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE