31da24efe74153d1d6613d69139f6b64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31da24efe74153d1d6613d69139f6b64
Size

13KB
MD5

31da24efe74153d1d6613d69139f6b64
SHA1

d9c0b2ea4ca89d4ec894b2fb678b1d4ac325f441
SHA256

eb04373dfbd66ee7c19811b8593c836c3c44573d28821c512c662c15f2578201
SHA512

6b1a51ea41ca371fadba471158e95fe2b97e939e923afacf39eba10a8a073c19b4c70b282db8c0607ea0f85db85a512cdec697468d0703859a0022447a47e677
SSDEEP

192:HCvjRJI5aUGRLdqfO1XvwEj3SOvOYCIWM7OuuggITQwMcND3koxYc:yOGRJqfc3SOvznJgIEo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31da24efe74153d1d6613d69139f6b64

Files

31da24efe74153d1d6613d69139f6b64
.exe windows:5 windows x86 arch:x86

ed4d423cac38ce31b5491d6eb7cbb974

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
ExitProcess

msvcrt

memset

advapi32

RegOpenKeyA
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text5
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ