af070cd3854f2234a85f2bd3065688d8d3a94c3c211fc123d9160a6c8d25cf46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af070cd3854f2234a85f2bd3065688d8d3a94c3c211fc123d9160a6c8d25cf46
Size

130KB
MD5

9fcc4fd3ddc87c4099055de5c360ad2f
SHA1

efd81ee62530f85d0795b27d7775fbab33822e86
SHA256

af070cd3854f2234a85f2bd3065688d8d3a94c3c211fc123d9160a6c8d25cf46
SHA512

0f4ae4c62eef46273de8bd7c3f3aa1888b0a0098f569e1dee74396526008cf3b61501ee1f84091efa5ecd67eaf7196c81c6585b5908d31db4d4fd4e90fef2697
SSDEEP

768:AOJQ1G8F4b4LuTbT8orI+t6SnigzJY6QF5q5U+IPRgy8jmY44m4m4m4PUb:AX1G8FBGT8UQgpQTqGFfoUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af070cd3854f2234a85f2bd3065688d8d3a94c3c211fc123d9160a6c8d25cf46

Files

af070cd3854f2234a85f2bd3065688d8d3a94c3c211fc123d9160a6c8d25cf46
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE