e117aee9a31901b0865be8c2e3f36c7009b7d325cdbff77829ea81cc6654daf4 | Triage

Sharing

General

Target

e117aee9a31901b0865be8c2e3f36c7009b7d325cdbff77829ea81cc6654daf4
Size

300KB
MD5

7149335ef0bbf3bb00ed73e81733c900
SHA1

fc2901e58bbd79c16adfeb94f9c0342dd0a0381f
SHA256

e117aee9a31901b0865be8c2e3f36c7009b7d325cdbff77829ea81cc6654daf4
SHA512

9d7d84d4ad0d6fe20dbe632f98a7692b69544668fadb3f90d08a90b8c0bc22c06b808f201fb543429eee0ce5003b05478beabccbb2769efda8c00796a2971eef
SSDEEP

6144:caQbbFhjLoqmVQP8C/ldsGKQVj5r3AFIF2jq3VfRD9oOkO/uvvX211:cTxcwZRKO3A5uRfWvvY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e117aee9a31901b0865be8c2e3f36c7009b7d325cdbff77829ea81cc6654daf4

Files

e117aee9a31901b0865be8c2e3f36c7009b7d325cdbff77829ea81cc6654daf4
.exe windows:4 windows x86 arch:x86

de6c7cb6a3205debfc6ae490248ff623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
QueryPerformanceCounter
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE