71c4b45fe8c7871d9e4e4a5e6da6e724b797489cbe88580312646f078ba18a8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71c4b45fe8c7871d9e4e4a5e6da6e724b797489cbe88580312646f078ba18a8a
Size

3.9MB
MD5

4d6ee8f47bd9b907baf7994ccae80279
SHA1

dbf248a1211b421317567cadba2821fb08a73487
SHA256

71c4b45fe8c7871d9e4e4a5e6da6e724b797489cbe88580312646f078ba18a8a
SHA512

8d2c7d1d655af5d31b163d948872d5e138a1b435d677550c981a378b92f73947a9aebc49ae9222e2efcc64280ba0bb5cdb17db66192a1d21e1025297e01cf542
SSDEEP

98304:r/ToU5ForLdiGvlcCOgdMMBBw7eiFLJlr:jrFtSIkMyBwqilzr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c4b45fe8c7871d9e4e4a5e6da6e724b797489cbe88580312646f078ba18a8a

Files

71c4b45fe8c7871d9e4e4a5e6da6e724b797489cbe88580312646f078ba18a8a
.exe windows x86

61f8fe009fd5fb28895d7f92e405cf04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

freeaddrinfo

kernel32

GlobalUnlock
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

OpenClipboard

advapi32

RegCloseKey

Sections

.text
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

^EUHTYRG
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

^EUHTYRG
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

^EUHTYRG
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ