a7acc797f91305160d71d56ca8c56e101386212c35f933fc5f5032c7eb4cf731N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7acc797f91305160d71d56ca8c56e101386212c35f933fc5f5032c7eb4cf731N
Size

2KB
MD5

f5c34a548d7f5a36b1cf3d10a62df170
SHA1

dd3a3abd0f25d875ef544e05f0c284dbd7de94d3
SHA256

a7acc797f91305160d71d56ca8c56e101386212c35f933fc5f5032c7eb4cf731
SHA512

a0f92c65ce556bb338d81579b8a1b71a098a0b7d28ad0154a2f8b6b71ece6cdf514360fef6651eea2ead9e43c202df5b8dc43486936505dda3087cfe395525b7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/write.exe

Files

a7acc797f91305160d71d56ca8c56e101386212c35f933fc5f5032c7eb4cf731N
.cab
write.exe
.exe windows:5 windows x86 arch:x86

2f5a6e4c8541fc783e0f062cd17163a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA

shell32

ShellExecuteA

msvcrt

_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ