a294620543334a721a2ae8eaaf9680a0786f4b9a216d75b55cfd28f39e9430ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a294620543334a721a2ae8eaaf9680a0786f4b9a216d75b55cfd28f39e9430ea
Size

9KB
MD5

42e52b8daf63e6e26c3aa91e7e971492
SHA1

98b3fb74b3e8b3f9b05a82473551c5a77b576d54
SHA256

a294620543334a721a2ae8eaaf9680a0786f4b9a216d75b55cfd28f39e9430ea
SHA512

b21039ad67e07a77bbcfe73a89afd22c7e1fd782a5293c41edd0ae1dbd75c4fdf6404d8cfe5cf2191ad1822e32877ded1675e48895e8b9898778855d3dd56636
SSDEEP

192:76f0CW5P2Io4evFrDv2ZRJzCn7URRsjVJaZF:76fPWl24evFrT2ZR5Cn7UR0VJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a294620543334a721a2ae8eaaf9680a0786f4b9a216d75b55cfd28f39e9430ea

Files

a294620543334a721a2ae8eaaf9680a0786f4b9a216d75b55cfd28f39e9430ea
.exe windows:5 windows x86 arch:x86

ea8609d4dad999f73ec4b6f8e7b28e55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

DsRoleGetPrimaryDomainInformation

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ