a7d9e6a005893592ad5ef8cbfe8906092e1d5eb344a2b546c746b07e6d832103N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7d9e6a005893592ad5ef8cbfe8906092e1d5eb344a2b546c746b07e6d832103N
Size

2.6MB
MD5

fda05355260230b7e49997d411e2e950
SHA1

c35d530838aed57daef8774621505efa486eb6c4
SHA256

a7d9e6a005893592ad5ef8cbfe8906092e1d5eb344a2b546c746b07e6d832103
SHA512

4b869d0775a3078bc1b57ca031b8372984a43bdd8f2761923f796d177d49456aa3d5f2c0ef0c8c3301a99b5e11663bb686618c5a4924bd6d907195be2b322b36
SSDEEP

49152:OkcJV4IcHWgV3Kvul+0eQxYGzkJLQsq0EpKDA8VbjSYt2JdDkeCO5mWXw7Jb4Rqn:RbWg4vX0ZuJpTbDFJt2JdDkeCOcWMli2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d9e6a005893592ad5ef8cbfe8906092e1d5eb344a2b546c746b07e6d832103N

Files

a7d9e6a005893592ad5ef8cbfe8906092e1d5eb344a2b546c746b07e6d832103N
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ