3778c83aa48deca7a79cd4147ff0bc35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3778c83aa48deca7a79cd4147ff0bc35
Size

73KB
MD5

3778c83aa48deca7a79cd4147ff0bc35
SHA1

198668cf2a0a101b6fa62bc465637285745d5d61
SHA256

4f560570727760bfa2606cb9a7fdacfb46c92d2c02c98da37ac1a659151ea94f
SHA512

6b32bec25d5edc23e6d23d07ee32d29938850925b86277ce8734f09ea8bb643675c0ca7032c4c662071e38fa10ddcea77df8c64228f9eb5c8b02f6b14a3477a9
SSDEEP

768:I/j+60+kIuHT1mjqyLdLlHQ6PE+hLOgtueY3N1gJGKv6aYD9CcgdosIgxPzZwwEu:BHRmxLB5lMyL1uRN10v0JCosfzZX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3778c83aa48deca7a79cd4147ff0bc35

Files

3778c83aa48deca7a79cd4147ff0bc35
.exe windows:4 windows x86 arch:x86

344ac1076f2c934341c9829dda6968ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
GetExitCodeProcess
GetFileSize
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
Sleep
WriteFile
lstrcatA
lstrcpyA

Sections

.text
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ