fbeab3f3f964afce2bb26940d6e6461501436d0975c1f8f5df5362f6aa3bd649 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbeab3f3f964afce2bb26940d6e6461501436d0975c1f8f5df5362f6aa3bd649
Size

73KB
MD5

612a3bf2a946ccc16878f341fc527a2c
SHA1

25a101bbc71b944ace094a3ea820f4d0141cbedd
SHA256

fbeab3f3f964afce2bb26940d6e6461501436d0975c1f8f5df5362f6aa3bd649
SHA512

e69f87aa338d2ff8d6df24acf97f6b1fdf94782f7686637cf396143556a0b6b6b35e72a87975d4edfbf8191468c38a91658f574fc69c51df768cf937d9a428d0
SSDEEP

768:x/noLGInaxhPtqgeD93QSC+/MavmZ+0kBzU+0Kcjol1duCn6Q/HssssssssssssZ:xALG7hPFM3XCYMaOZ+TSZolh6Q/dr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbeab3f3f964afce2bb26940d6e6461501436d0975c1f8f5df5362f6aa3bd649

Files

fbeab3f3f964afce2bb26940d6e6461501436d0975c1f8f5df5362f6aa3bd649
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE