a911d761aff9b182b1c95f30585249db7fb08bb2014748e51451107d839160b4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a911d761aff9b182b1c95f30585249db7fb08bb2014748e51451107d839160b4N
Size

1.3MB
MD5

ad81215ec1357f81666aa3778f4ca180
SHA1

d0400060df2857bcb235cc65613da717dc3b2173
SHA256

a911d761aff9b182b1c95f30585249db7fb08bb2014748e51451107d839160b4
SHA512

39656c722b9266fcc0159a37f98c02d1fcf801833a58039064bd2da23758aac23ace02d36daa93a28225b8999275ca9c9ffe434641b298c98c53fd4b101e5cc5
SSDEEP

24576:H0OtsTfvLAFvB2RSTIz8VNUGhmvGGxGPVsI51HCZoEp38rbEmFjIR:UO6ADTIwCQs2BHCJ8r7FER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a911d761aff9b182b1c95f30585249db7fb08bb2014748e51451107d839160b4N

Files

a911d761aff9b182b1c95f30585249db7fb08bb2014748e51451107d839160b4N
.exe windows:4 windows x86 arch:x86

dbdb0525986cb60465f8680544bd9d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE