391b62887b0b1c651396122190722e5ffd90495da4933cee004eddfbffe48af6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

391b62887b0b1c651396122190722e5ffd90495da4933cee004eddfbffe48af6
Size

928KB
MD5

5416881e0a54ebceb6554e3d8a494d49
SHA1

ad5f90619e52cd3f2c429138cd7a849c1d5c45cb
SHA256

391b62887b0b1c651396122190722e5ffd90495da4933cee004eddfbffe48af6
SHA512

23181c58eb87a100abe151395521e1ac32a3c69801de33795262fca87ec7d9bf6389cca0d6f8fa237640ae4b742797f44886809f6dcd2eb053df942140b3a77b
SSDEEP

24576:sAEpSzLRpGRrzB5qxy9HwaenLe6bPvIiCnR3fRTNZ:D5z+LHwlPvIiuR5Tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391b62887b0b1c651396122190722e5ffd90495da4933cee004eddfbffe48af6

Files

391b62887b0b1c651396122190722e5ffd90495da4933cee004eddfbffe48af6
.exe windows x86

3a8897c84eb41f36b4bbabcc617408b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 128KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 780KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ