121f37058e1396d9d636517b1432b883 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

121f37058e1396d9d636517b1432b883
Size

64KB
MD5

121f37058e1396d9d636517b1432b883
SHA1

fdd87d3de74e27183082697b8f4c9e0c7ec18338
SHA256

3e0b471d5a2caa5382624a6c945101f3ec278d0669dfb492c5294d3a70d84fa1
SHA512

ca19ee58f59ced02b91ddcdd6ed51932763c28b62fbde3a71e71ffb19950728adc53a357a343fab554de45be6c9baee72ff2cff22e3918548d51c9b209dec8aa
SSDEEP

384:QRPDf4x10TlNVEqNl6cyWd/bhQEW7oKGwqPOrcCM1NXuG4pIHSLyrEJuPFFctF6z:IDAq/ldRLK1rDZfIM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121f37058e1396d9d636517b1432b883

Files

121f37058e1396d9d636517b1432b883
.exe windows:4 windows x86 arch:x86

f128cdac3da81715712ce209fb7add05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateProcessA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA

msvcrt

malloc
strlen
rand
memset
srand
time
atol
free
printf
_exit
strcpy
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ