34ca0791740ed0f681e1d27a986b054a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ca0791740ed0f681e1d27a986b054a
Size

817KB
MD5

34ca0791740ed0f681e1d27a986b054a
SHA1

6efdaa7512857a2b3842b2900c9ae8709cf66159
SHA256

66ad80bc071fda3a69e232225ac4ae0c42c1964f25f67a1e29489f8e9d648cf5
SHA512

df13438eba0d7ce59295a2488bdf5158d88a29df6d4bc3e34464d766f29dfc48c11ab8fa8eb080af466c4e5edc0b65148d82c8e9334a6ab9c7635c73bf99cec8
SSDEEP

24576:xHSjxkiJODfeFXbjiYH1nxQftD0+FSal//e8T/:Ejx5JODWFXbjiYH1xQp0gS+Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ca0791740ed0f681e1d27a986b054a

Files

34ca0791740ed0f681e1d27a986b054a
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 512KB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ