a09b2a42b31079435b830fbb2a514ed0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a09b2a42b31079435b830fbb2a514ed0N
Size

576KB
MD5

a09b2a42b31079435b830fbb2a514ed0
SHA1

2af080e5afe89467ccd663d05af63dff52a126a5
SHA256

81a25305be1a1e6adf38b83472211d115aec96eadd560259db4e02f1a6d16e80
SHA512

b1b701dcdbc54e90ebfb19c6e87d3acca1c13cf1c86549b52f91d31431092186d0702b4c73d0a82fe8d9610d9015cb146e9c1bd47b9aad9ad86d79cc0fd6e5e9
SSDEEP

12288:NyAfDcgcTQhgpZBDtoRAG01LqTl2mZoiCB29tc8veYXl:vDVBADt1ZKlXC29+8veYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a09b2a42b31079435b830fbb2a514ed0N

Files

a09b2a42b31079435b830fbb2a514ed0N
.exe windows:4 windows x86 arch:x86

06ea752c2bfc857d5f84f3229253c7b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
SetFilePointer
ReadFile
CreateFileA
CreateProcessA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
DeleteFileA
Sleep
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
LCMapStringW
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
WriteFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
CloseHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile

user32

LoadStringA
FindWindowA
MessageBeep
MessageBoxA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ