071a46b0eaf80547e9b01a9195b37be9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

071a46b0eaf80547e9b01a9195b37be9
Size

36KB
MD5

071a46b0eaf80547e9b01a9195b37be9
SHA1

d815689e8624b93fc82cc663997e98f8133460cb
SHA256

9ef3c6fa75cf3c89622a6db9cb8cf98da14a0a2d43ea090e34293808d937d8b0
SHA512

7b14866f091fe0548e2bda2c2a7f8bd238d47972a37ada5f6d51e20b688db72568cb0c258ed7655a8525dd5cbb1cbe80f9011265f826b7fba686bad210df070b
SSDEEP

768:piHflXdiCYhvqlOFvdXJef6oAPos1y67n:gaCMmOd5eYPoQy6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
071a46b0eaf80547e9b01a9195b37be9

Files

071a46b0eaf80547e9b01a9195b37be9
.exe windows:4 windows x86 arch:x86

f2d60465320b3506d0959af2f0ad1843

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
CreateEventA
GlobalAlloc
lstrcpyA
GetFileSize
lstrcatA
LocalAlloc
LocalFree
GetVersionExA
lstrlenA
CloseHandle
GlobalFree
GetTickCount
FreeLibrary
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
Sleep
GetLastError

gdi32

LineTo
GetStockObject
ExtTextOutA
GetTextExtentPoint32A
DeleteObject
BitBlt
GetTextMetricsA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1017B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrs
Size: 32KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ