a4375b63fa3aaf039c369648b83ccfa1d0971f98b5edc849d52fc1049968b7a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4375b63fa3aaf039c369648b83ccfa1d0971f98b5edc849d52fc1049968b7a3
Size

84KB
MD5

8717fd33b947c97d98309b6ec422f1a7
SHA1

9d0afb1ffd89f369c3aeb500d4e1c5193c2265e3
SHA256

a4375b63fa3aaf039c369648b83ccfa1d0971f98b5edc849d52fc1049968b7a3
SHA512

e310c58b34f7251e16cb1b47ef0de2e70fb2e0f4060fc33b598536c17e397960fb05f4f92da29d4220603485ffc70ab2ed02c2e58b0a7a39e7c23d2444c403fa
SSDEEP

1536:g1TErz9NUaasjkS9DanycPgfT729JuJ5JNJ4JG53/KCY3L3RiAfLiZaK+Q:MErzOsjk8DMdPgfqQLj+o3/VefLib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4375b63fa3aaf039c369648b83ccfa1d0971f98b5edc849d52fc1049968b7a3

Files

a4375b63fa3aaf039c369648b83ccfa1d0971f98b5edc849d52fc1049968b7a3
.exe windows:4 windows x86 arch:x86

bca4bdcd4f43625162405dc2c10a2a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
FindWindowExA
FindWindowA

kernel32

lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
Sleep

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ