b004e67ff2aa4fe434716041186655705f89f412a6efdb5bbfb44398b77e27d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b004e67ff2aa4fe434716041186655705f89f412a6efdb5bbfb44398b77e27d3
Size

25KB
MD5

70ea2e834352534cccea5a86c1493ba7
SHA1

5fb58e8dda83783d2554f42c03c0d4f94a009dff
SHA256

b004e67ff2aa4fe434716041186655705f89f412a6efdb5bbfb44398b77e27d3
SHA512

0c560f5320e9a96ac085e0dc0c02fd8a52005065e72d2980a646e25a5d556dec9b86f266437b7c5168ab9b53ad396fc9b069fe5ad245c5b042f97a63da8ef019
SSDEEP

384:S+Wek7qAVgspnZWGVWvWpnWlpwsMY6BUg1KGnCw08I:S+WWy5N7IKYNiCw0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b004e67ff2aa4fe434716041186655705f89f412a6efdb5bbfb44398b77e27d3

Files

b004e67ff2aa4fe434716041186655705f89f412a6efdb5bbfb44398b77e27d3
.exe windows:5 windows x86

a4efbf89b80e444ba42d503698698324

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
sprintf
_strlwr
malloc
putchar
_controlfp
printf

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeviceIoControl
FormatMessageW
WideCharToMultiByte
CloseHandle
CreateFileA
GetModuleHandleA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE