5081edcba6608a1b2249d659296ccdcd097fce3044bbb7869eec6e14589fdffbN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5081edcba6608a1b2249d659296ccdcd097fce3044bbb7869eec6e14589fdffbN
Size

55KB
MD5

f48cc4fc168485d343f9adcd48168720
SHA1

de3d4b40af8864ae77771a76197571fab8baffbc
SHA256

5081edcba6608a1b2249d659296ccdcd097fce3044bbb7869eec6e14589fdffb
SHA512

8e16f29496735e6f6f0cef5683e133b842cb7c1c13f4c018970c41396dcde7a04a363960d4f2131cdd25d20919a1a10502fa4d099b766b89ace8e8b18b801778
SSDEEP

1536:KCKoLD+h/84UimkdxMKXCjf6SRXCkHDxk0a5rB0L:KCKomy45ZpUTCyDfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5081edcba6608a1b2249d659296ccdcd097fce3044bbb7869eec6e14589fdffbN

Files

5081edcba6608a1b2249d659296ccdcd097fce3044bbb7869eec6e14589fdffbN
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ