a0dcdac44fa16cd484ff0575a060f28e5a07030c252162ead48d46703c6eb9ac | Triage

Sharing

General

Target

a0dcdac44fa16cd484ff0575a060f28e5a07030c252162ead48d46703c6eb9ac
Size

3.6MB
MD5

485b75fa52b29dda71b63df18183e553
SHA1

14c84985e4984cb61eb101dc4faa7a7789576ba6
SHA256

a0dcdac44fa16cd484ff0575a060f28e5a07030c252162ead48d46703c6eb9ac
SHA512

96459378fdbd3d5d56854573051934eaa74123d6361d51bc942e46e7e369ff69b8813faddf70002e92c595b5713736e1634c33fda27426c0c7afe68f5b91768a
SSDEEP

49152:PHiOIp3J0tKUC+x+2xWVu0Vvrq9Vf0odWT1dw8m8FzRaN8T1/:PCpnUo2831qBW/e8za

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0dcdac44fa16cd484ff0575a060f28e5a07030c252162ead48d46703c6eb9ac

Files

a0dcdac44fa16cd484ff0575a060f28e5a07030c252162ead48d46703c6eb9ac
.exe windows:6 windows x86 arch:x86

edef8b54d302f064c62760f07435bdf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
CloseHandle
TryEnterCriticalSection
CreateThread
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
GetTempPathA
SetEndOfFile
SetFilePointer
CreateNamedPipeA
ConnectNamedPipe
ExitProcess
VirtualAlloc
ExitThread

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 937KB - Virtual size: 937KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ