70591f6fb289c53a9a650fd5a80d0ec1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70591f6fb289c53a9a650fd5a80d0ec1
Size

9KB
MD5

70591f6fb289c53a9a650fd5a80d0ec1
SHA1

232c2c5d8eb021740a06042f81cda4d7f0ea9e90
SHA256

3c27bafb308274142489fc6cb3c4be5d1dcb8fbd8bb8f43c1c752592fdd93ce9
SHA512

ef1c953af9893225a9b4c56005fa5de1dbb964051617de8303614082136b70b8ff23516e24bac665bd34fcb28b3bf21d2beea2929238e4b638fcd2c363e71951
SSDEEP

48:6PH5rypgfLK4CRzvp20SDogyIga/Q6mKWEfeRNFXvs+JNJ2JS88tZBv7c:aypwLSRE0SDoX5PEfevRsWNJ26dw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70591f6fb289c53a9a650fd5a80d0ec1

Files

70591f6fb289c53a9a650fd5a80d0ec1
.exe windows:4 windows x86 arch:x86

a29e41627ed10624b64fbb01fd8b76f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ