f112d488a785012dabe9bcc5fcfcab24b8b1c3635a0c82ce4a382565fe848390N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f112d488a785012dabe9bcc5fcfcab24b8b1c3635a0c82ce4a382565fe848390N
Size

71KB
MD5

9c2faf51d26ceaf201323cd3b65b5970
SHA1

18a841422713382c651b1c6c3fc7e0eb3468d8c0
SHA256

f112d488a785012dabe9bcc5fcfcab24b8b1c3635a0c82ce4a382565fe848390
SHA512

2565cb228c9c776a5d86a889df4a0d945c5d0bfdfffca5372163b7f46123069def09f65fb4ed05383b1364af1613745450abbb1e2d3b360c28aef0e3b0d7fbd2
SSDEEP

1536:xesVVg0uuuZqcFMMknvALxibD5cZHTSt1h9N/vEXX:pm0+ZqcFsvLXSm9N/sH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f112d488a785012dabe9bcc5fcfcab24b8b1c3635a0c82ce4a382565fe848390N

Files

f112d488a785012dabe9bcc5fcfcab24b8b1c3635a0c82ce4a382565fe848390N
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE