315c261b474e03237966f5e69790b784 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

315c261b474e03237966f5e69790b784
Size

42KB
MD5

315c261b474e03237966f5e69790b784
SHA1

e471a02971b898cc5844fcf738121625ec408076
SHA256

8ae4e8095cc8a1da51dc8024ff6562f067510b7d58e089608b8753ff331ad204
SHA512

c57dca1bffda278176f16d84d1325fce06b5c1b4f8ea0e1b32c7838882d9e16e082951b2d26da7d963a7ed711720c8f1ee61aecc03256abcc1751b4d785eb80b
SSDEEP

768:slnzGt+w1foMSqtvjIWjd7djaEIR83zy8:Wzy1NtvjIW7CR83zL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
315c261b474e03237966f5e69790b784

Files

315c261b474e03237966f5e69790b784
.exe windows:4 windows x86 arch:x86

d6c91b0b362893c3061950ec88276732

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetTickCount
GetModuleHandleA
lstrcatA
GlobalAlloc
OpenProcess
ExitProcess
HeapAlloc
HeapFree
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 9KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ