3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b | Triage

Sharing

General

Target

3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b
Size

134KB
MD5

9600202e9919aa76d669a8a5115dfeb8
SHA1

9bd82a367d94ccf349338f4ae4a266ff600785f0
SHA256

3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b
SHA512

17905a5ade7a056287a56086411faac570f20721ef56e0d56dafbbba2f478e3e49d1b4e6228d3d62231e7c8f7a58ffa1591b36d67439de2b3430bf4354eed93f
SSDEEP

3072:bUD9JxpzoSIP9tKXYPgqtA8+FnH07e9R23RnvU:bUD9JxpzozP6vq+80nU7zR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b

Files

3618b9794c150076cb82dfa0b95e9caffcb45be8adefc1a8f30014e9e018da4b
.exe windows x86

7356561522da79605eab86fd45677a06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
lstrlenA
WriteFile
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
ReadFile
MultiByteToWideChar
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FlushFileBuffers
SetFilePointer
GetStdHandle
WideCharToMultiByte
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
GetStringTypeW

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_CxxThrowException
__CxxFrameHandler
??2@YAPAXI@Z

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ