38f8510aca98bdd109e3783914315131 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38f8510aca98bdd109e3783914315131
Size

36KB
MD5

38f8510aca98bdd109e3783914315131
SHA1

ec55f0105437ff992a4b25396e48d3287cc388bc
SHA256

58b0d1090b93323e9af689cff3a20151fb1ff5aa74dab51fac946d006c3fe526
SHA512

d5e5c8a9c97c2a3626f9aeb05c06e0e2501afa0861c60deb1e960fe57335938a7a7004c187d6ba2720e9435cf74170be3b72fb8c5d00d46caa093406917fcc1c
SSDEEP

768:dVVw6C84flDTAB6IlkgsETJqKEO5DMF096zfRxISHtwugk+31fZoC:dVcd/2QzsoWczTISNPghFB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38f8510aca98bdd109e3783914315131

Files

38f8510aca98bdd109e3783914315131
.exe windows:4 windows x86 arch:x86

8c7fb360b988c8413ab8e238b0cf930f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugSetProcessKillOnExit
Thread32First
EnumTimeFormatsA
ReadConsoleOutputCharacterA
GetDiskFreeSpaceW
CreateJobObjectA
IsDBCSLeadByte
AddLocalAlternateComputerNameW
SignalObjectAndWait
ValidateLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE