afafd63a5d983c8cb36d2e4e719865ba993ec5e684a8002550f950273f9b0147N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afafd63a5d983c8cb36d2e4e719865ba993ec5e684a8002550f950273f9b0147N
Size

2.0MB
MD5

5554f3185ea8424b6b9b70d1461a43e0
SHA1

ba297f21a1fd0b8b7ee67608ff2ea9dec8d1d4a6
SHA256

afafd63a5d983c8cb36d2e4e719865ba993ec5e684a8002550f950273f9b0147
SHA512

efc4d9937206eca858bb4e604f474eb95b01be3848804bb0691905efe74b0f600563b6c7614467ac71244e2a79f06ba18425e0cf9840865fa3eefa6c9e8caf69
SSDEEP

49152:6hlRUcyUw/jHrZFXiDXYuaCheNmrhs8ZuA8:CRqFFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afafd63a5d983c8cb36d2e4e719865ba993ec5e684a8002550f950273f9b0147N

Files

afafd63a5d983c8cb36d2e4e719865ba993ec5e684a8002550f950273f9b0147N
.exe windows:4 windows

f8c74e7c1ac55dba57fb83c64b9a445c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetThreadLocale
GetVersion

user32

GetCaretBlinkTime

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE