397add9de855a2fef4fe7b3ff4044ca3 | Triage

Sharing

General

Target

397add9de855a2fef4fe7b3ff4044ca3
Size

116KB
MD5

397add9de855a2fef4fe7b3ff4044ca3
SHA1

7d4c0d9cc581548a2f5ec569c906390596d7737d
SHA256

601784861c61d8e011a072336e64269339e838e18396a6a64a602407cc07715e
SHA512

1890af0bffabcbdeea5eb6ee16b4ee2d339963be35a6acb21fdcd36a0002c6281b9d801692e3c58d1380a8f542c5809cf0f6069d53f3882919385c87457b6754
SSDEEP

3072:fAxtWt4rjRpgGtnDJM5pBYv3h8RpL6KZk:ONDtn1cpBCh8RpL6Km

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397add9de855a2fef4fe7b3ff4044ca3

Files

397add9de855a2fef4fe7b3ff4044ca3
.exe windows:4 windows x86 arch:x86

8d67dbd84b51dbbe9021b0e14ee41956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LockResource
LoadResource
FindResourceA
SizeofResource
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE