fa257ffd279d56319352f8a3d855bb9e643cc7fa71efe15e499e3fc1b81c060f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa257ffd279d56319352f8a3d855bb9e643cc7fa71efe15e499e3fc1b81c060f
Size

122KB
MD5

a923841dbe0d5897ef30547edba8c146
SHA1

32484077f1047afb56d2dc301ac306f510b7b492
SHA256

fa257ffd279d56319352f8a3d855bb9e643cc7fa71efe15e499e3fc1b81c060f
SHA512

51f34ed0036cff2397c51257ab5fe2611d1e00514ab166bbbd62e03abb8608aa92c2239b6e409af6541220c1fda8ae2983df555be795dd6c86909f4afd302a83
SSDEEP

1536:FPxHkP1KZChMEhVBERySJ8m35cG2DYSB+PDTeDp8UEu2Z:FJHkP1KshVm8CcG2D1kDTel8UER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa257ffd279d56319352f8a3d855bb9e643cc7fa71efe15e499e3fc1b81c060f

Files

fa257ffd279d56319352f8a3d855bb9e643cc7fa71efe15e499e3fc1b81c060f
.exe windows:6 windows x86 arch:x86

bdd7abd3f2e946ba786f16c8f824752f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
GlobalMemoryStatusEx
VirtualProtect
DeleteFileW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 706B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ