338db744b6def54f7eada86c7dc7c13f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

338db744b6def54f7eada86c7dc7c13f
Size

80KB
MD5

338db744b6def54f7eada86c7dc7c13f
SHA1

a344de5e8492643e9d93b1344d09f04ccf670673
SHA256

3f58d376aa61095773bda383c53833ba737b3b69e34462485b61f08a75b3fa4d
SHA512

3ca1caf02a0291d46c3f129da105718714d9868b0fe70e1ae3ce247eeedfb258c8eec0ad2f500878b00bf0a9ad54f13dc79b7db1015744394fe53d55ee6c4529
SSDEEP

1536:tzWYBjic2OCSRAhVXJuBBuNbRzNb6VaIf82hW8fPL:tPVic9CSm7wz6NbeaQ8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
338db744b6def54f7eada86c7dc7c13f

Files

338db744b6def54f7eada86c7dc7c13f
.exe windows:4 windows x86 arch:x86

3d0fa57a7df53a3a94c84b5ab367c3c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
GlobalFix
GetUserGeoID
IsProcessInJob
GetSystemWindowsDirectoryA
GetFirmwareEnvironmentVariableW
GetNumaAvailableMemoryNode
SystemTimeToFileTime
BackupWrite
FileTimeToLocalFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE