38960dfa1646376dcfcd492b966b5d74 | Triage

Sharing

General

Target

38960dfa1646376dcfcd492b966b5d74
Size

16KB
MD5

38960dfa1646376dcfcd492b966b5d74
SHA1

1b9e3afde326b63c428ac8038b308a8423910993
SHA256

04f5e7803af7538c2485d0cbd3c45ceb73b4b9432cad549109ef8cb089fc09d8
SHA512

9d6e202f6e49285cfc08ff659f331f466ca1797632c2079f397d0bee08930335a97ddb25becc9ca3095c361f17ab8945737cf7907b5bc010eb46a96aba3db44a
SSDEEP

384:Fx8v26Ufb1+MJT8w98T6BNinUpKQzve3nZ/xr:FxJvfx+MJTguTm3Z/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38960dfa1646376dcfcd492b966b5d74

Files

38960dfa1646376dcfcd492b966b5d74
.exe windows:4 windows x86 arch:x86

cc405bf3f9e096e34e0af9509fff57c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
Module32Next
GetWindowsDirectoryA
Module32First
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetStartupInfoA

user32

CharUpperBuffA

msvcrt

_adjust_fdiv
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
strrchr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ