71cf6dfde7d8ab7c6773d3f5a6a40640_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71cf6dfde7d8ab7c6773d3f5a6a40640_exe32.exe
Size

66KB
MD5

71cf6dfde7d8ab7c6773d3f5a6a40640
SHA1

d2f462f2989abbf43a831e5a57803ee084ca094d
SHA256

9b8c5b342bce69a500ddbae46e2b93e19f40386a6b93f557a265bb348196a6d2
SHA512

23adcf9da8fbe4588aa7715f078638110b6a89f4815d1aaee548b888837803dd50baa07e591e8dc0f7f432f73a39c9c5c8e7e16fe4b208eb9442360e48afa4fb
SSDEEP

1536:RACMeMwvw6z9vZT8TrX7YDY/1BJCGI2YcFju7NwQPU:5B9NErX0DO1TCMYYjuxn8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71cf6dfde7d8ab7c6773d3f5a6a40640_exe32.exe

Files

71cf6dfde7d8ab7c6773d3f5a6a40640_exe32.exe
.exe windows:4 windows x86

6a59fba2a78a350d1ea4049b5437a2e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegFlushKey
K32GetModuleBaseNameW
GetThreadPreferredUILanguages
GetVolumeInformationByHandleW
PeekConsoleInputA
FindActCtxSectionGuid
RegCreateKeyExA
PssWalkSnapshot
StartThreadpoolIo
SetConsoleCursorPosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE