692efa39679b6b00642906611cecc055 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

692efa39679b6b00642906611cecc055
Size

62KB
MD5

692efa39679b6b00642906611cecc055
SHA1

aa0d1cbb7cc74af653cdfdf04e26b79b3d0a4860
SHA256

1850c844032b51c477268878ebdb52748e6c2b56d59770f685d0f21efa9fc7ea
SHA512

35ccd6feb8b48fd21eab2355da6c5847883cf9f246729df60bb819a6d3b257ce1a2ae49b64a4f80e6d316aeda3d8f56a02991dac4aab13a072e81ac5be954cc4
SSDEEP

768:jbz3IhpglwpDEq2m0j6Tf8V4Ie7ZZa3R1fb961vNPrl7EJnCJ0uAN:n4+wpDElm2IAUZZo1fbs1RVEZCJ0r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692efa39679b6b00642906611cecc055

Files

692efa39679b6b00642906611cecc055
.exe windows:4 windows x86 arch:x86

d9c7208ff3022bb34870c7ddeb406eb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord537
ord5683
ord4129
ord800
ord823
ord825

msvcrt

strstr
_except_handler3
__CxxFrameHandler
_access
srand
rand
_mkdir

kernel32

GetTickCount
LoadLibraryA
GetProcAddress
GetLocalTime
lstrcpyA
GetFileAttributesA
GetLastError
SetUnhandledExceptionFilter
CreateThread
WaitForSingleObject
ExpandEnvironmentStringsA
DeleteFileA
MoveFileExA
CloseHandle
WriteFile
CreateFileA
FreeLibrary
GetCommandLineA

user32

wsprintfA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ