072c9669cdc83a1f6a1007d229eb7d0d | Triage

Sharing

General

Target

072c9669cdc83a1f6a1007d229eb7d0d
Size

3.7MB
MD5

072c9669cdc83a1f6a1007d229eb7d0d
SHA1

666e7dfc4481e107c2669f55c81c3261c226a895
SHA256

130f8f2efc69b14fa62879f445db3cd337ec1e122294ec10be62df2655df905b
SHA512

adf8f709be5a82f61561b32574aef27dc00584746024511714950b5fd688d06ea37d77e31520dc87bbc3667986dbd72b87926e0721a06c84ccfa036237f539cf
SSDEEP

98304:gtv/lAZDFiXcYRt3ugZVjT1CTGB60OsxrHk1FThioH1S:gllAZDFbwBPgTxsO1ldH1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
072c9669cdc83a1f6a1007d229eb7d0d

Files

072c9669cdc83a1f6a1007d229eb7d0d
.exe windows:5 windows x86 arch:x86

40be8cc4db23f1b9e947e8c925e45363

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExW
CreateSemaphoreW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

MessageBoxW

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata1
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ