b70995be82ea417f7b6ce5c10c158080_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b70995be82ea417f7b6ce5c10c158080_exe32.exe
Size

27KB
MD5

b70995be82ea417f7b6ce5c10c158080
SHA1

63479ea8753a59c6219a7fa24eb6006f73bd2089
SHA256

a37be4615a5aa8d5bdcf1f686aaabb6520d19f1c44f1214c8626db61a7e4ea45
SHA512

091fa9b8c654ee426e666766a3ff943d9a7424764af803ec6ae142ae9b4597bd939aa9997e2499a5aa8e69f4848dafe6c42e968cf1313c8b2b22c18add0f3a54
SSDEEP

768:2+qGRP/lx35U2XuhuYX4uuhGuNmhuuuhuvZuuudofuuuhwuhuvp77yTVmAi0eu2p:hnlxJQ0jS77bwVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70995be82ea417f7b6ce5c10c158080_exe32.exe

Files

b70995be82ea417f7b6ce5c10c158080_exe32.exe
.exe windows:5 windows x86

7df0b0fad24b17c7f71555496439c732

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DispatchMessageA
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
LoadCursorA
PostMessageA
GetKeyboardState
PostQuitMessage
GetClassLongA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
HeapFree
SetFilePointer
WriteFile
ReadFile
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ