318446e9e543064300cba5260bfb5b04 | Triage

Sharing

General

Target

318446e9e543064300cba5260bfb5b04
Size

51KB
MD5

318446e9e543064300cba5260bfb5b04
SHA1

d0dd17ec8440fda0b814c3203475fe06a52d9f84
SHA256

ad102b4310a87f2ce8a8d74209bb9bdae59007db2f27364966557b314983ae9d
SHA512

ddebef82f2afbec81a460355f91fae3e288c117f41db883b1c8b3845d06f5f4976b0b187a32496d5edc0f6e115b04379f93069d956a760e24ed66e35f3b51b45
SSDEEP

1536:9gpkOfcl2H0P15sJdIPnKYvxkpjuQZL7tZlQ05vgkkNJt27X:9gpkOfcl2H0P15sJdIPnKYvx4dA05vSM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
318446e9e543064300cba5260bfb5b04

Files

318446e9e543064300cba5260bfb5b04
.exe windows:4 windows x86 arch:x86

7dbdc0df8560412fb53053d112dbe16f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
Sleep
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
QueryPerformanceCounter
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE