a0bf83fb4c8213f12926039afa948460bf9397e1e6ec93e0e68f7908b01e1ebdN | Triage

Sharing

General

Target

a0bf83fb4c8213f12926039afa948460bf9397e1e6ec93e0e68f7908b01e1ebdN
Size

96KB
MD5

2461e64be1812a2c6855456854c5c2a0
SHA1

30bfd15634bd4ba1c550ca5e2e54c814ce138f3e
SHA256

a0bf83fb4c8213f12926039afa948460bf9397e1e6ec93e0e68f7908b01e1ebd
SHA512

4a045835509545662c912959224c24e9309bf6a73126595dc6bf02cda5f7db53dc18b6c43b1a96351d87c560255d7b66cbc0838adceb35566f6047b9ca737184
SSDEEP

3072:NV8kcD69TjDEvxFqb1ITEY8TNqbJz9vIoIY5g:NV5O+nDEzqb1ebJz9w0g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0bf83fb4c8213f12926039afa948460bf9397e1e6ec93e0e68f7908b01e1ebdN

Files

a0bf83fb4c8213f12926039afa948460bf9397e1e6ec93e0e68f7908b01e1ebdN
.exe windows:4 windows x86 arch:x86

4794ab1c671125a23da582f6762e7b09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ