0364942088acf2f0a35332dedadc624f | Triage

Sharing

General

Target

0364942088acf2f0a35332dedadc624f
Size

193KB
MD5

0364942088acf2f0a35332dedadc624f
SHA1

bd57b0174bb2e9f8a362a329c8deb5f29d1bea73
SHA256

8633c7d7e58fd33f93be6d1b920f972fcb60751a9e009fa4a46628840dbdde49
SHA512

d5b4f4b0269f2cec96902253a796f4cbf8b629a254c8ec02337386e0deb73d12e67b49b2e4dd51213963b8c3db4824f9155eab8c5ab701ab27495d1ea12114a8
SSDEEP

3072:5+p05B8Tz3hLjngHUbnHAJR//5JblNABBMYkxuNZTD4h/9erAnp3x:5+p0ETFP9LIJhAzh7oh/9er6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0364942088acf2f0a35332dedadc624f

Files

0364942088acf2f0a35332dedadc624f
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ