af7ada92f2148226e6aa19bc98181d2f4bc2db5f000b8ffd411d6c7a01c7bc03 | Triage

Sharing

General

Target

af7ada92f2148226e6aa19bc98181d2f4bc2db5f000b8ffd411d6c7a01c7bc03
Size

2.7MB
MD5

f6686cfe0fac65070d89dfde31659f5f
SHA1

a6339083489e82a069a3f68088f8f6a110a014b8
SHA256

af7ada92f2148226e6aa19bc98181d2f4bc2db5f000b8ffd411d6c7a01c7bc03
SHA512

59025690ebf7d053cbb4dd5bebed2f5412cb3c7ccd079b3bdc1f1210c14132fa7816088b4aac8bfd6642aaadd6032111f09bfd237a98b200e5fd507cc509fee5
SSDEEP

24576:Le9GmCpDSfSIOxGfRZmzPzJc/xN1SVBjxGu0sltkFPcVGBEqfM6eJ4ckErbsk2vs:LeQXQfBfRMJHxXYCow6C4QQjYy8v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af7ada92f2148226e6aa19bc98181d2f4bc2db5f000b8ffd411d6c7a01c7bc03

Files

af7ada92f2148226e6aa19bc98181d2f4bc2db5f000b8ffd411d6c7a01c7bc03
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

msqkiklp
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cprlemud
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE