4a86db659fba8c04069aa1c53fc3891308cbd3066ed55799a2ec0bee4326a200 | Triage

Sharing

General

Target

4a86db659fba8c04069aa1c53fc3891308cbd3066ed55799a2ec0bee4326a200
Size

73KB
MD5

f9c9474eb138aaf04bee565795872ba9
SHA1

14cfea29cad2f2ab8b2e5e7dc94ff8a5b643b632
SHA256

4a86db659fba8c04069aa1c53fc3891308cbd3066ed55799a2ec0bee4326a200
SHA512

bad2c363b79ba44d726140d0117b23c40e60933abbf3b2e086d3407b828f5abc07779a028e70b5c26dcae312d90d7c498838b2c5bae74a747de4338b0bd663fe
SSDEEP

768:x/ntvmAziy5BoC9wpS+t3Bj1ChBuQKKRedCSG7AGvMpe2GXnvjLhlfl9u/xo4t9T:xn9Cdp1lmBubDdvGwpRGXnv3h42Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a86db659fba8c04069aa1c53fc3891308cbd3066ed55799a2ec0bee4326a200

Files

4a86db659fba8c04069aa1c53fc3891308cbd3066ed55799a2ec0bee4326a200
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE